diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 7edb6e5..d27f98c 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -24,6 +24,8 @@ jobs:
       - name: Install cosign
         # v3.1.2
         uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19
+        with:
+          cosign-release: 'v1.13.1'
 
       - name: Set up QEMU for ARM emulation
         # v2.2.0
@@ -75,4 +77,4 @@ jobs:
         # against the sigstore community Fulcio instance.
         run: |
           cosign sign ghcr.io/${{ github.repository }}@${{ steps.build-and-push.outputs.digest }}
-          cosign sign docker.io/${{ secrets.DOCKER_HUB_USERNAME }}/yt-dlp-webui@${{ steps.build-and-push.outputs.digest }}
\ No newline at end of file
+          cosign sign docker.io/${{ secrets.DOCKER_HUB_USERNAME }}/yt-dlp-webui@${{ steps.build-and-push.outputs.digest }}