diff --git a/setup-bom/action.yml b/setup-bom/action.yml
index 861a7a2..a21f73d 100644
--- a/setup-bom/action.yml
+++ b/setup-bom/action.yml
@@ -35,7 +35,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0
+    - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
       with:
         install-dir: ${{ inputs.install-dir }}
         use-sudo: ${{ inputs.use-sudo }}