diff --git a/Earthfile b/Earthfile
index 8f706b4c..2b7de2b9 100644
--- a/Earthfile
+++ b/Earthfile
@@ -241,7 +241,7 @@ installer:
     SAVE ARTIFACT /out/bluebuild
 
 cosign:
-    FROM ghcr.io/sigstore/cosign/cosign
+    FROM ghcr.io/sigstore/cosign/cosign:v2.4.1
     SAVE ARTIFACT /ko-app/cosign
 
 digest:
diff --git a/template/templates/stages.j2 b/template/templates/stages.j2
index fc76c869..1e226018 100644
--- a/template/templates/stages.j2
+++ b/template/templates/stages.j2
@@ -24,7 +24,7 @@ COPY ./modules /modules
 # stage process so that adding the bins into the image
 # can be added to the ostree commits.
 FROM scratch AS stage-bins
-COPY --from=ghcr.io/sigstore/cosign/cosign /ko-app/cosign /bins/cosign
+COPY --from=ghcr.io/sigstore/cosign/cosign:v2.4.1 /ko-app/cosign /bins/cosign
 COPY --from=ghcr.io/blue-build/cli:
 {%- if let Some(tag) = recipe.blue_build_tag -%}
 {{ tag }}