diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index d4f58c7..6e8ac32 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -255,7 +255,7 @@ jobs:
 
       # Install cosign for signing
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v4.1.1
+        uses: sigstore/cosign-installer@v4.1.2
 
       # Install syft for SBOM generation
       - name: Install Syft
diff --git a/go.mod b/go.mod
index 76b6e46..872099c 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/ibm-hyper-protect/contract-cli
 go 1.26.1
 
 require (
-	github.com/ibm-hyper-protect/contract-go/v2 v2.23.0
+	github.com/ibm-hyper-protect/contract-go/v2 v2.26.0
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
 	github.com/stretchr/testify v1.11.1
diff --git a/go.sum b/go.sum
index 9adf5b3..b34edce 100644
--- a/go.sum
+++ b/go.sum
@@ -5,6 +5,8 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/ibm-hyper-protect/contract-go/v2 v2.23.0 h1:pFzSzamtaD7Akf7rrM/yDQZmu1fS4/p7U7hFanbdRpY=
 github.com/ibm-hyper-protect/contract-go/v2 v2.23.0/go.mod h1:tbxT+1Xpl4jyYhK2scBO/OTl7/iM2HOoAQxkjdbnY7A=
+github.com/ibm-hyper-protect/contract-go/v2 v2.26.0 h1:2f0xIZ+OLujVgX6f0Ic5Q+Q5AJWt6q/SHRlAJ6ZVcQ8=
+github.com/ibm-hyper-protect/contract-go/v2 v2.26.0/go.mod h1:tbxT+1Xpl4jyYhK2scBO/OTl7/iM2HOoAQxkjdbnY7A=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
diff --git a/samples/tgz/docker-compose.yaml b/samples/tgz/docker-compose.yaml
index 4e1fe9c..ec39136 100644
--- a/samples/tgz/docker-compose.yaml
+++ b/samples/tgz/docker-compose.yaml
@@ -1,3 +1,3 @@
 services:
   hello-world:
-    image: docker.io/library/hello-world@sha256:f9078146db2e05e794366b1bfe584a14ea6317f44027d10ef7dad65279026885
\ No newline at end of file
+    image: docker.io/library/hello-world@sha256:0e760fdfbc48ba8041e7c6db999bb40bfca508b4be580ac75d32c4e29d202ce1
\ No newline at end of file