diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index a6f49ee8c8..3f6965bfed 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -113,7 +113,7 @@ jobs:
           exit-code: '1'
           timeout: "10m0s"
       - name: cosign-installer
-        uses: sigstore/cosign-installer@v3.0.3
+        uses: sigstore/cosign-installer@v3.5.0
       - name: Set up Node.js
         uses: actions/setup-node@v2
         with:
@@ -614,7 +614,7 @@ jobs:
         run: echo "${WIX}bin" >> $GITHUB_PATH
         shell: bash
       - name: Set cosign-installer
-        uses: sigstore/cosign-installer@v3.0.3
+        uses: sigstore/cosign-installer@v3.5.0
       - name: Download Windows Installer Zip
         run: |
           echo default login ${{ secrets.BALLERINA_BOT_USERNAME }} password ${{ secrets.BALLERINA_BOT_TOKEN }} >> _netrc