diff --git a/security/rekor/Makefile b/security/rekor/Makefile
index db0cd2f58fd5..497ad0d0efdb 100644
--- a/security/rekor/Makefile
+++ b/security/rekor/Makefile
@@ -1,66 +1,65 @@
 PORTNAME=	rekor
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.5.3
-PORTREVISION=	3
+DISTVERSION=	1.5.4
 CATEGORIES=	security
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Software Supply Chain Transparency Log ${${FLAVOR}_COMMENT}
 WWW=		https://www.sigstore.dev/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 FLAVORS=	client server
 FLAVOR?=	${FLAVORS:[1]}
 client_PKGNAMESUFFIX=	-client
 client_COMMENT=		(client only)
 client_PLIST=	${.CURDIR}/pkg-plist.client
 server_PKGNAMESUFFIX=	-server
 server_COMMENT=		(server only)
 server_PLIST=	${.CURDIR}/pkg-plist.server
 
 USES=		cpe go:modules
 CPE_VENDOR=	linuxfoundation
 .if ${FLAVOR} == server
 USE_RC_SUBR=	rekor
 .endif
 
 GO_MODULE=	github.com/sigstore/rekor
 .if ${FLAVOR} == client
 GO_TARGET=	./cmd/rekor-cli
 .elif ${FLAVOR} == server
 GO_TARGET=	./cmd/rekor-server \
 		./cmd/backfill-index \
 		./cmd/cleanup-index \
 		./cmd/copy-index
 .endif
 GO_BUILDFLAGS=	-ldflags="\
 	-X sigs.k8s.io/release-utils/version.gitVersion=$(DISTVERSION) \
 	-X sigs.k8s.io/release-utils/version.gitCommit=$(GIT_HASH) \
 	-X sigs.k8s.io/release-utils/version.gitTreeState=clean \
 	-X sigs.k8s.io/release-utils/version.buildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}}"
 
 .if ${FLAVOR} == server
 USERS=		${PORTNAME}
 GROUPS=		${PORTNAME}
 .endif
 
-GIT_HASH=	7d9dcffcc27c4912e7d17fc768db01aa2d5cf26c
+GIT_HASH=	a36bd716fd0d81c314092718f37b53dc26b2af38
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc/rekor
 .if ${FLAVOR} == client
 	${INSTALL_DATA} ${WRKSRC}/config/rekor.yaml ${STAGEDIR}${PREFIX}/etc/rekor/rekor.yaml.sample
 .elif ${FLAVOR} == server
 	${INSTALL_DATA} ${WRKSRC}/rekor-server.yaml ${STAGEDIR}${PREFIX}/etc/rekor/rekor-server.yaml.sample
 .endif
 
 .include <bsd.port.post.mk>
diff --git a/security/rekor/distinfo b/security/rekor/distinfo
index 2ac4f9b6f1ca..2b50818105ab 100644
--- a/security/rekor/distinfo
+++ b/security/rekor/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1783204866
-SHA256 (go/security_rekor/rekor-v1.5.3/v1.5.3.mod) = 2d2c82edd7e828e2dd3806af153e2495c9ba1311a3295595d8e9f9508fb4d235
-SIZE (go/security_rekor/rekor-v1.5.3/v1.5.3.mod) = 11530
-SHA256 (go/security_rekor/rekor-v1.5.3/v1.5.3.zip) = f78e5fb078e3b38097395cc940bc524616c6ba597ad5d00fde022869a9985a16
-SIZE (go/security_rekor/rekor-v1.5.3/v1.5.3.zip) = 1242174
+TIMESTAMP = 1787346590
+SHA256 (go/security_rekor/rekor-v1.5.4/v1.5.4.mod) = ad87b18dca7809e332061bed592894cefe8edf41cc083795512823f93b928199
+SIZE (go/security_rekor/rekor-v1.5.4/v1.5.4.mod) = 11434
+SHA256 (go/security_rekor/rekor-v1.5.4/v1.5.4.zip) = 5490c4aca7a4aa1653ea19e5967b307ca22aab6f8f6d4680cd2a2ddd96ac617d
+SIZE (go/security_rekor/rekor-v1.5.4/v1.5.4.zip) = 1152347