diff --git a/bucket/cosign.json b/bucket/cosign.json
index 5addb2a47c..cc80f478f6 100644
--- a/bucket/cosign.json
+++ b/bucket/cosign.json
@@ -1,12 +1,12 @@
 {
-    "version": "3.0.2",
+    "version": "3.0.3",
     "description": "Container Signing, Verification and Storage in an OCI registry.",
     "homepage": "https://github.com/sigstore/cosign",
     "license": "Apache-2.0",
     "architecture": {
         "64bit": {
-            "url": "https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-windows-amd64.exe#/cosign.exe",
-            "hash": "7a137280d8686665ceb4d8565df2a0ac63f28031e014cdcae5d56891a6c8a400"
+            "url": "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe#/cosign.exe",
+            "hash": "2593655025b52b5b1c99e43464459b645a3acbe5d4a5a9f3a766e77beec5a441"
         }
     },
     "bin": "cosign.exe",