diff --git a/Dockerfile.client-server-cg.rh b/Dockerfile.client-server-cg.rh
index b61f7232534c..97bc32ce1247 100644
--- a/Dockerfile.client-server-cg.rh
+++ b/Dockerfile.client-server-cg.rh
@@ -1,6 +1,6 @@
 # Provides the Trusted Artifact Signer CLI binaries, cosign and gitsign
 
-FROM quay.io/securesign/cli-cosign@sha256:4ec69652b96c3cfddc813c42a763d81dc82f894c745a33e99deaa92814f4e918 AS cosign
+FROM quay.io/securesign/cli-cosign@sha256:ecab8996ef673dbf8044704a3371c8a82428e742c559fa36ba07a6d2df6715de AS cosign
 FROM quay.io/securesign/gitsign@sha256:7b48bc6d16ba28956ad932c2c0c9a62586ebd5088579b5518b78134be95c1882 AS gitsign
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:73f7dcacb460dad137a58f24668470a5a2e47378838a0190eef0ab532c6e8998
diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh
index 4f6cafbfae48..2094a66a1e9a 100644
--- a/Dockerfile.clients.rh
+++ b/Dockerfile.clients.rh
@@ -1,5 +1,5 @@
 # Provides the Trusted Artifact Signer CLI binaries, cosign and gitsign
-FROM quay.io/securesign/cli-cosign@sha256:4ec69652b96c3cfddc813c42a763d81dc82f894c745a33e99deaa92814f4e918 AS cosign
+FROM quay.io/securesign/cli-cosign@sha256:ecab8996ef673dbf8044704a3371c8a82428e742c559fa36ba07a6d2df6715de AS cosign
 FROM quay.io/securesign/gitsign@sha256:3229dc9d5bad1344663ac92a980eb6abcd5715dc3812a20a2129f60b885ececf AS gitsign
 
 # Provides the Trusted Artifact Signer CLI binary, fetch-tsa-certs