diff --git a/Dockerfile.client-server-cg.rh b/Dockerfile.client-server-cg.rh
index 47e183030a2..5733359f954 100644
--- a/Dockerfile.client-server-cg.rh
+++ b/Dockerfile.client-server-cg.rh
@@ -1,6 +1,6 @@
 # Provides the Trusted Artifact Signer CLI binaries, cosign and gitsign
 
-FROM quay.io/securesign/cli-cosign@sha256:4ec69652b96c3cfddc813c42a763d81dc82f894c745a33e99deaa92814f4e918 AS cosign
+FROM quay.io/securesign/cli-cosign@sha256:8934f6be5d892318a15e3d06f50d1fecb6823608be577827c00be6cf58f769fd AS cosign
 FROM quay.io/securesign/gitsign@sha256:26288a765783d5c0ee93c5150523eca7610a021d9725494d4373f0529a2fee29 AS gitsign
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:f5d2c6a1e0c86e4234ea601552dbabb4ced0e013a1efcbfb439f1f6a7a9275b0
diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh
index 4055cdc612a..bb2956f2540 100644
--- a/Dockerfile.clients.rh
+++ b/Dockerfile.clients.rh
@@ -1,5 +1,5 @@
 # Provides the Trusted Artifact Signer CLI binaries, cosign and gitsign
-FROM quay.io/securesign/cli-cosign@sha256:6fa39582a3d62a2aa5404397bb638fdd0960f9392db659d033d7bacf70bddfb1 AS cosign
+FROM quay.io/securesign/cli-cosign@sha256:8934f6be5d892318a15e3d06f50d1fecb6823608be577827c00be6cf58f769fd AS cosign
 FROM quay.io/securesign/gitsign@sha256:6ab19b6a0ee77a59ac8df3c298c262b7cab6631863141163d919a5130ac7d385 AS gitsign
 
 # Provides the Trusted Artifact Signer CLI binary, fetch-tsa-certs