diff --git a/security/cosign/Makefile b/security/cosign/Makefile
index 278dfc87f4b1..5caac0bd4887 100644
--- a/security/cosign/Makefile
+++ b/security/cosign/Makefile
@@ -1,36 +1,35 @@
 PORTNAME=	cosign
 DISTVERSIONPREFIX=	v
-DISTVERSION=	3.1.1
-PORTREVISION=	1
+DISTVERSION=	3.1.2
 CATEGORIES=	security
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Signing OCI containers and other artifacts using Sigstore
 WWW=		https://www.sigstore.dev/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
-USES=		cpe go:modules
+USES=		cpe go:1.26+,modules
 CPE_VENDOR=	sigstore
 
 GO_MODULE=	github.com/sigstore/cosign/v3
 GO_TARGET=	./cmd/${PORTNAME}
 GO_BUILDFLAGS=	-ldflags="-buildid= \
 		-X sigs.k8s.io/release-utils/version.gitVersion=$(DISTVERSION) \
 		-X sigs.k8s.io/release-utils/version.gitCommit=$(GIT_HASH) \
 		-X sigs.k8s.io/release-utils/version.gitTreeState=clean \
 		-X sigs.k8s.io/release-utils/version.buildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}}"
 
 PLIST_FILES=	bin/${PORTNAME}
 
-GIT_HASH=	7914231b348c4057891edeb321772aad3ed04fce
+GIT_HASH=	193d2153431f8bb0d945a4c1ee721872f73add67
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 .include <bsd.port.post.mk>
diff --git a/security/cosign/distinfo b/security/cosign/distinfo
index 74b6464aeeed..1b0887e05a21 100644
--- a/security/cosign/distinfo
+++ b/security/cosign/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1781356155
-SHA256 (go/security_cosign/cosign-v3.1.1/v3.1.1.mod) = 6b256dac88a7e1fc2088113cdb3ec9033c48d2e0315a0718049585abcac0d86a
-SIZE (go/security_cosign/cosign-v3.1.1/v3.1.1.mod) = 16167
-SHA256 (go/security_cosign/cosign-v3.1.1/v3.1.1.zip) = 7278b71ad75a56ef151abc57baf03b676cc94c363e5807bf302c17ddacfc4b20
-SIZE (go/security_cosign/cosign-v3.1.1/v3.1.1.zip) = 1353186
+TIMESTAMP = 1784487337
+SHA256 (go/security_cosign/cosign-v3.1.2/v3.1.2.mod) = 62ee3f278a7ee61f5a4b5aedd6af3291465ff45035267afc1224c04bd206a939
+SIZE (go/security_cosign/cosign-v3.1.2/v3.1.2.mod) = 15707
+SHA256 (go/security_cosign/cosign-v3.1.2/v3.1.2.zip) = 6d98f8a1d414529a59a166b1fa8cbc8bb5ec087e95f1c12152d27a0ed954ca22
+SIZE (go/security_cosign/cosign-v3.1.2/v3.1.2.zip) = 1314583