diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index a1336672..ff73a8c5 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -118,11 +118,13 @@ jobs:
       pull-requests: write
     steps:
           # Install the cosign tool
-          # ref.: https://github.com/sigstore/cosign-installer, v2.2.0
+          # ref.: https://github.com/sigstore/cosign-installer, v3.2.0
           - name: Install cosign
-            uses: sigstore/cosign-installer@d6a3abf1bdea83574e28d40543793018b6035605
+            uses: sigstore/cosign-installer@1fc5bd396d372bee37d608f955b336615edf79c8
             with:
-              cosign-release: 'v1.7.2'
+              cosign-release: 'v2.0.0'
+          - name: Confirm installation!
+            run: cosign version
           - name: Download artifacts
             uses: actions/download-artifact@v3.0.0
             with:
@@ -265,4 +267,4 @@ jobs:
             env:
               MERGE_LABELS: "automerge"
               GITHUB_TOKEN: "${{ secrets.REPO_ACCESS }}"
-              LOG: "TRACE"
\ No newline at end of file
+              LOG: "TRACE"