diff --git a/cosign.yaml b/cosign.yaml
index a1645634672..51a5c1be4db 100644
--- a/cosign.yaml
+++ b/cosign.yaml
@@ -1,7 +1,7 @@
 package:
   name: cosign
-  version: 2.0.2
-  epoch: 4
+  version: 2.1.0
+  epoch: 0
   description: Container Signing
   copyright:
     - license: Apache-2.0
@@ -22,7 +22,7 @@ pipeline:
   - uses: fetch
     with:
       uri: https://github.com/sigstore/cosign/archive/v${{package.version}}/cosign-v${{package.version}}.tar.gz
-      expected-sha256: 5d4950f8718c231fb393206bc9e5b2b49be0eb0d3204563744b3c80a7526764b
+      expected-sha256: e599ac19017bcf2ee90ff2591d29e9cc116eedd71e870608cddb0eb2fbb98a28
 
   - uses: go/build
     with: