diff --git a/bucket/cosign.json b/bucket/cosign.json
index a4bab0796e..8afc67c321 100644
--- a/bucket/cosign.json
+++ b/bucket/cosign.json
@@ -1,12 +1,12 @@
 {
-    "version": "1.8.0",
+    "version": "1.9.0",
     "description": "Container Signing, Verification and Storage in an OCI registry.",
     "homepage": "https://github.com/sigstore/cosign",
     "license": "Apache-2.0",
     "architecture": {
         "64bit": {
-            "url": "https://github.com/sigstore/cosign/releases/download/v1.8.0/cosign-windows-amd64.exe#/cosign.exe",
-            "hash": "d274f4baa3ebd11308c8486379759c96071ae58c852078fff0e4952205d92f00"
+            "url": "https://github.com/sigstore/cosign/releases/download/v1.9.0/cosign-windows-amd64.exe#/cosign.exe",
+            "hash": "62dd10f56b939409267033282aae54ab6ec466270c12b3e0db15c3f41a0c12d1"
         }
     },
     "bin": "cosign.exe",