diff --git a/__tests__/sigstore/sigstore.test.itg.ts b/__tests__/sigstore/sigstore.test.itg.ts
index abb0e2bf..c9344114 100644
--- a/__tests__/sigstore/sigstore.test.itg.ts
+++ b/__tests__/sigstore/sigstore.test.itg.ts
@@ -36,7 +36,7 @@ const maybe = runTest ? describe : describe.skip;
 const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;
 
 const imageName = 'ghcr.io/docker/actions-toolkit-test';
-const currentCosignVersion = 'v3.1.1';
+const currentCosignVersion = 'v3.1.2';
 const signAttestationCosignVersions = ['v3.0.2', 'v3.0.6', currentCosignVersion] as const;
 const installedCosign = new Map<string, Promise<string>>();
 
diff --git a/dev.Dockerfile b/dev.Dockerfile
index 87e0f351..8a7eecad 100644
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -20,7 +20,7 @@ ARG BUILDX_VERSION=0.35.0
 ARG COMPOSE_VERSION=5.3.1
 ARG UNDOCK_VERSION=0.14.0
 ARG REGCTL_VERSION=v0.11.5
-ARG COSIGN_VERSION=v3.1.1
+ARG COSIGN_VERSION=v3.1.2
 
 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git