diff --git a/backup/job-sign.yaml b/backup/job-sign.yaml
index 1b23aee..ff53196 100644
--- a/backup/job-sign.yaml
+++ b/backup/job-sign.yaml
@@ -12,7 +12,7 @@ spec:
       containers:
         - name: cosign
           # Built from ci on 2022-03-15
-          image: gcr.io/projectsigstore/cosign:v1.13.1
+          image: gcr.io/projectsigstore/cosign:v2.2.0
           args: [
             "sign",
             "--fulcio-url",
diff --git a/backup/verify-job.yaml b/backup/verify-job.yaml
index 348c999..5509878 100644
--- a/backup/verify-job.yaml
+++ b/backup/verify-job.yaml
@@ -11,7 +11,7 @@ spec:
       containers:
         - name: cosign
           # Built from ci on 2022-03-15
-          image: gcr.io/projectsigstore/cosign:v1.13.1
+          image: gcr.io/projectsigstore/cosign:v2.2.0
           args: [
             "verify",
             "--allow-insecure-registry",
diff --git a/images/toolbox/Dockerfile b/images/toolbox/Dockerfile
index b866d0d..b858be1 100644
--- a/images/toolbox/Dockerfile
+++ b/images/toolbox/Dockerfile
@@ -1,4 +1,4 @@
-FROM gcr.io/projectsigstore/cosign:v1.13.1 AS cosign
+FROM gcr.io/projectsigstore/cosign:v2.2.0 AS cosign
 
 FROM gcr.io/go-containerregistry/crane:v0.12.0 AS crane