diff --git a/CHANGELOG.md b/CHANGELOG.md
index 49f6bb94..8f1cb7c0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,8 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+- Update `cosign@latest` to 3.0.6.
+
 - Update `coreutils@latest` to 0.8.0.
 
 ## [2.75.0] - 2026-04-07
diff --git a/manifests/cosign.json b/manifests/cosign.json
index fa4ea6b2..51466871 100644
--- a/manifests/cosign.json
+++ b/manifests/cosign.json
@@ -28,13 +28,13 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/sigstore/cosign/blob/main/LICENSE)",
   "latest": {
-    "version": "3.0.5"
+    "version": "3.0.6"
   },
   "3": {
-    "version": "3.0.5"
+    "version": "3.0.6"
   },
   "3.0": {
-    "version": "3.0.5"
+    "version": "3.0.6"
   },
   "3.0.6": {
     "x86_64_linux_musl": {