diff --git a/Dockerfile.client-server-cg.rh b/Dockerfile.client-server-cg.rh
index 47e183030a2..553d94b3ec0 100644
--- a/Dockerfile.client-server-cg.rh
+++ b/Dockerfile.client-server-cg.rh
@@ -1,6 +1,6 @@
 # Provides the Trusted Artifact Signer CLI binaries, cosign and gitsign
 
-FROM quay.io/securesign/cli-cosign@sha256:4ec69652b96c3cfddc813c42a763d81dc82f894c745a33e99deaa92814f4e918 AS cosign
+FROM quay.io/securesign/cli-cosign@sha256:e4bd95095db2cd3cb5fd5c58ec5f652ceca1cce188c91aa6e4410060a83a36e2 AS cosign
 FROM quay.io/securesign/gitsign@sha256:26288a765783d5c0ee93c5150523eca7610a021d9725494d4373f0529a2fee29 AS gitsign
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:f5d2c6a1e0c86e4234ea601552dbabb4ced0e013a1efcbfb439f1f6a7a9275b0
diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh
index e00c2bfb28e..07d92f6fb2a 100644
--- a/Dockerfile.clients.rh
+++ b/Dockerfile.clients.rh
@@ -1,5 +1,5 @@
 # Provides the Trusted Artifact Signer CLI binaries, cosign and gitsign
-FROM quay.io/securesign/cli-cosign@sha256:ec6ccea9b174f37758a7f09db45751500d024a067d60ec6f58924675c017d7fb AS cosign
+FROM quay.io/securesign/cli-cosign@sha256:e4bd95095db2cd3cb5fd5c58ec5f652ceca1cce188c91aa6e4410060a83a36e2 AS cosign
 FROM quay.io/securesign/gitsign@sha256:9958e668ce2068ea6df6370190e70bc7cc4b07a7ae1b04f99912b3f2a549fa24 AS gitsign
 
 # Provides the Trusted Artifact Signer CLI binary, fetch-tsa-certs