diff --git a/bucket/cosign.json b/bucket/cosign.json
index 5c4add1dce..939bee5506 100644
--- a/bucket/cosign.json
+++ b/bucket/cosign.json
@@ -6,7 +6,7 @@
     "architecture": {
         "64bit": {
             "url": "https://github.com/sigstore/cosign/releases/download/v1.5.0/cosign-windows-amd64.exe#/cosign.exe",
-            "hash": "a892d11ed548f74968df15e29d64b0ec5ec5e9a12b1712cfd60c653ec8b636f9"
+            "hash": "cdd2717287bf258ff8bfa51d938981d9ffd4eeb3341575f795634c0c41b556c4"
         }
     },
     "bin": "cosign.exe",
@@ -18,7 +18,8 @@
             }
         },
         "hash": {
-            "url": "$baseurl/cosign_checksums.txt"
+            "url": "$baseurl/cosign_checksums.txt",
+            "regex": "$sha256\\s+$basename[^_]"
         }
     }
 }