diff --git a/bucket/cosign.json b/bucket/cosign.json
index e8f87ca4bb..2433e33f28 100644
--- a/bucket/cosign.json
+++ b/bucket/cosign.json
@@ -1,12 +1,12 @@
 {
-    "version": "2.5.3",
+    "version": "2.6.0",
     "description": "Container Signing, Verification and Storage in an OCI registry.",
     "homepage": "https://github.com/sigstore/cosign",
     "license": "Apache-2.0",
     "architecture": {
         "64bit": {
-            "url": "https://github.com/sigstore/cosign/releases/download/v2.5.3/cosign-windows-amd64.exe#/cosign.exe",
-            "hash": "545d87e096cab55e213f25b6ec5c9a74c958f72d05182cee1cd53a4eb6c2e561"
+            "url": "https://github.com/sigstore/cosign/releases/download/v2.6.0/cosign-windows-amd64.exe#/cosign.exe",
+            "hash": "7beb4dd1e19a72c328bbf7c0d7342d744edbf5cbb082f227b2b76e04a21c16ef"
         }
     },
     "bin": "cosign.exe",