diff --git a/security/certificate_maker/Makefile b/security/certificate_maker/Makefile
index 1cdcf1242b01..6c50bb1c98bf 100644
--- a/security/certificate_maker/Makefile
+++ b/security/certificate_maker/Makefile
@@ -1,23 +1,23 @@
 PORTNAME=	certificate_maker
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.8.6
+DISTVERSION=	1.8.7
 CATEGORIES=	security
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Certificate creation utility for Fulcio
 WWW=		https://www.sigstore.dev/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USES=		cpe go:1.25+,modules
 CPE_VENDOR=	sigstore
 
 GO_MODULE=	github.com/sigstore/fulcio
 GO_BUILDFLAGS=	-ldflags="-X \
 		sigs.k8s.io/release-utils/version.gitVersion=${DISTVERSIONPREFIX}${DISTVERSION}"
 GO_TARGET=	./cmd/${PORTNAME}
 
 PLIST_FILES=	bin/${PORTNAME}
 
 .include <bsd.port.mk>
diff --git a/security/certificate_maker/distinfo b/security/certificate_maker/distinfo
index f904a2daf805..fd21533124c7 100644
--- a/security/certificate_maker/distinfo
+++ b/security/certificate_maker/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1780144812
-SHA256 (go/security_certificate_maker/certificate_maker-v1.8.6/v1.8.6.mod) = a68e80dccb43f617d9d1d99036fd97b5f0f70cd1b93da9cd133b19979b12c5cd
-SIZE (go/security_certificate_maker/certificate_maker-v1.8.6/v1.8.6.mod) = 8530
-SHA256 (go/security_certificate_maker/certificate_maker-v1.8.6/v1.8.6.zip) = 6644256f626a1b7649c8862616ac15149d940174c1ae8ad877a78e0d508aa35a
-SIZE (go/security_certificate_maker/certificate_maker-v1.8.6/v1.8.6.zip) = 1244709
+TIMESTAMP = 1780238088
+SHA256 (go/security_certificate_maker/certificate_maker-v1.8.7/v1.8.7.mod) = 89a708825a12e987d4fabcc37df1dc0af4f693aa8339ab25fb6175459cedd901
+SIZE (go/security_certificate_maker/certificate_maker-v1.8.7/v1.8.7.mod) = 8530
+SHA256 (go/security_certificate_maker/certificate_maker-v1.8.7/v1.8.7.zip) = 551d38508a4772773869eb9dc05f81993c0a4fed8ed6fcbc1d467ed07f8e8295
+SIZE (go/security_certificate_maker/certificate_maker-v1.8.7/v1.8.7.zip) = 1245015