diff --git a/security/cosign/Makefile b/security/cosign/Makefile
index dce1e9f88b70..72d097a2b8b1 100644
--- a/security/cosign/Makefile
+++ b/security/cosign/Makefile
@@ -1,35 +1,35 @@
 PORTNAME=	cosign
 DISTVERSIONPREFIX=	v
-DISTVERSION=	3.0.4
+DISTVERSION=	3.0.5
 CATEGORIES=	security
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Signing OCI containers and other artifacts using Sigstore
 WWW=		https://www.sigstore.dev/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USES=		cpe go:modules
 CPE_VENDOR=	sigstore
 
 GO_MODULE=	github.com/sigstore/cosign/v3
 GO_TARGET=	./cmd/${PORTNAME}
 GO_BUILDFLAGS=	-ldflags="-buildid= \
 		-X sigs.k8s.io/release-utils/version.gitVersion=$(DISTVERSION) \
 		-X sigs.k8s.io/release-utils/version.gitCommit=$(GIT_HASH) \
 		-X sigs.k8s.io/release-utils/version.gitTreeState=clean \
 		-X sigs.k8s.io/release-utils/version.buildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}}"
 
 PLIST_FILES=	bin/${PORTNAME}
 
-GIT_HASH=	6832fba4928c1ad69400235bbc41212de5006176
+GIT_HASH=	479147a4df05f31be48aeb2b3a9d32dfc35ba877
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 .include <bsd.port.post.mk>
diff --git a/security/cosign/distinfo b/security/cosign/distinfo
index 9e1b75f75f7d..6ce49bf092ee 100644
--- a/security/cosign/distinfo
+++ b/security/cosign/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1773572911
-SHA256 (go/security_cosign/cosign-v3.0.4/v3.0.4.mod) = 50eb0f195dce7629d74b4e37d61616be87d2c41e94ae60e6400d04184d4d6c01
-SIZE (go/security_cosign/cosign-v3.0.4/v3.0.4.mod) = 16396
-SHA256 (go/security_cosign/cosign-v3.0.4/v3.0.4.zip) = 22603d29abb16fa2987bd36e063c8d4be229b0e378b3bc859b3c359fe5d918be
-SIZE (go/security_cosign/cosign-v3.0.4/v3.0.4.zip) = 1333169
+TIMESTAMP = 1774009048
+SHA256 (go/security_cosign/cosign-v3.0.5/v3.0.5.mod) = 0599cd8250bf549694b42169a6ba0f382844daaa36c47c8c1b151d02564d0d79
+SIZE (go/security_cosign/cosign-v3.0.5/v3.0.5.mod) = 16368
+SHA256 (go/security_cosign/cosign-v3.0.5/v3.0.5.zip) = 194de9853f2eb11ea5e2004ff16c2dcc9994a1e3297b1ec661decd5afba4e7c3
+SIZE (go/security_cosign/cosign-v3.0.5/v3.0.5.zip) = 1342881