diff --git a/Dockerfile.client-server-cg.rh b/Dockerfile.client-server-cg.rh
index de81c6fcf3cc..1e58523668b3 100644
--- a/Dockerfile.client-server-cg.rh
+++ b/Dockerfile.client-server-cg.rh
@@ -1,6 +1,6 @@
 # Provides the Trusted Artifact Signer CLI binaries, cosign and gitsign
 
-FROM quay.io/securesign/cli-cosign@sha256:4ec69652b96c3cfddc813c42a763d81dc82f894c745a33e99deaa92814f4e918 AS cosign
+FROM quay.io/securesign/cli-cosign@sha256:2f4bc74c3c9a53942012b8247f94587b9fcbc4bd0ed5ea9ec9e13b510bfd56b9 AS cosign
 FROM quay.io/securesign/gitsign@sha256:26288a765783d5c0ee93c5150523eca7610a021d9725494d4373f0529a2fee29 AS gitsign
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:73f7dcacb460dad137a58f24668470a5a2e47378838a0190eef0ab532c6e8998
diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh
index 0b25c6355c67..31e378bc3f89 100644
--- a/Dockerfile.clients.rh
+++ b/Dockerfile.clients.rh
@@ -1,5 +1,5 @@
 # Provides the Trusted Artifact Signer CLI binaries, cosign and gitsign
-FROM quay.io/securesign/cli-cosign@sha256:4ec69652b96c3cfddc813c42a763d81dc82f894c745a33e99deaa92814f4e918 AS cosign
+FROM quay.io/securesign/cli-cosign@sha256:2f4bc74c3c9a53942012b8247f94587b9fcbc4bd0ed5ea9ec9e13b510bfd56b9 AS cosign
 FROM quay.io/securesign/gitsign@sha256:9d95b3eeb2f8c144c2a9e7d9735748448d0a62f0592e336db2682f73f1cb0160 AS gitsign
 
 # Provides the Trusted Artifact Signer CLI binary, fetch-tsa-certs