diff --git a/.github/workflows/update-deps.yml b/.github/workflows/update-deps.yml
index 7e5b0e45..9f2d5331 100644
--- a/.github/workflows/update-deps.yml
+++ b/.github/workflows/update-deps.yml
@@ -123,6 +123,10 @@ jobs:
               return new RegExp(`^(  ${escapeRegExp(key)}: ")([^"]*)(")$`, 'm');
             }
 
+            function tsConstStringPattern(key) {
+              return new RegExp(`^(const ${escapeRegExp(key)} = ')([^']*)(';)$`, 'm');
+            }
+
             const dependencyConfigs = {
               docker: {
                 name: 'Docker version',
@@ -263,6 +267,12 @@ jobs:
                         key: 'COSIGN_VERSION',
                         value: tag,
                         pattern: dockerfileArgPattern('COSIGN_VERSION')
+                      },
+                      {
+                        path: '__tests__/sigstore/sigstore.test.itg.ts',
+                        key: 'currentCosignVersion',
+                        value: tag,
+                        pattern: tsConstStringPattern('currentCosignVersion')
                       }
                     ]
                   };
diff --git a/__tests__/sigstore/sigstore.test.itg.ts b/__tests__/sigstore/sigstore.test.itg.ts
index 57612d8d..509a2d3b 100644
--- a/__tests__/sigstore/sigstore.test.itg.ts
+++ b/__tests__/sigstore/sigstore.test.itg.ts
@@ -36,8 +36,8 @@ const maybe = runTest ? describe : describe.skip;
 const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;
 
 const imageName = 'ghcr.io/docker/actions-toolkit/test';
-const currentCosignVersion = 'v3.0.6';
-const signAttestationCosignVersions = ['v3.0.2', currentCosignVersion] as const;
+const currentCosignVersion = 'v3.1.1';
+const signAttestationCosignVersions = ['v3.0.2', 'v3.0.6', currentCosignVersion] as const;
 const installedCosign = new Map<string, Promise<string>>();
 
 async function installCosign(version: string): Promise<string> {