diff --git a/.github/workflows/bake.yml b/.github/workflows/bake.yml
index 08c8b62..5de8405 100644
--- a/.github/workflows/bake.yml
+++ b/.github/workflows/bake.yml
@@ -125,7 +125,7 @@ on:
 env:
   BUILDX_VERSION: "v0.30.1"
   BUILDKIT_IMAGE: "moby/buildkit:v0.26.2"
-  DOCKER_ACTIONS_TOOLKIT_MODULE: "@docker/actions-toolkit@0.67.0"
+  DOCKER_ACTIONS_TOOLKIT_MODULE: "@docker/actions-toolkit@0.71.0"
   COSIGN_VERSION: "v3.0.2"
   LOCAL_EXPORT_DIR: "/tmp/buildx-output"
   MATRIX_SIZE_LIMIT: "20"
@@ -144,7 +144,7 @@ jobs:
           INPUT_DAT-MODULE: ${{ env.DOCKER_ACTIONS_TOOLKIT_MODULE }}
         with:
           script: |
-            await exec.exec('npm', ['install', '--prefer-offline', '--no-audit', '--ignore-scripts', core.getInput('dat-module')]);
+            await exec.exec('npm', ['install', '--prefer-offline', '--ignore-scripts', core.getInput('dat-module')]);
       -
         name: Set outputs
         id: set
@@ -312,7 +312,7 @@ jobs:
           INPUT_DAT-MODULE: ${{ env.DOCKER_ACTIONS_TOOLKIT_MODULE }}
         with:
           script: |
-            await exec.exec('npm', ['install', '--prefer-offline', '--no-audit', '--ignore-scripts', core.getInput('dat-module')]);
+            await exec.exec('npm', ['install', '--prefer-offline', '--ignore-scripts', core.getInput('dat-module')]);
       -
         name: Docker meta
         id: meta
@@ -519,7 +519,12 @@ jobs:
             const { Install } = require('@docker/actions-toolkit/lib/cosign/install');
             
             const cosignInstall = new Install();
-            const cosignBinPath = await cosignInstall.download(core.getInput('cosign-version'), true, true);
+            const cosignBinPath = await cosignInstall.download({
+              version: core.getInput('cosign-version'),
+              ghaNoCache: true,
+              skipState: true,
+              verifySignature: true
+            });
             await cosignInstall.install(cosignBinPath);
             
             const cosign = new Cosign();
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index cf30a57..ddb0670 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -132,7 +132,7 @@ on:
 env:
   BUILDX_VERSION: "v0.30.1"
   BUILDKIT_IMAGE: "moby/buildkit:v0.26.2"
-  DOCKER_ACTIONS_TOOLKIT_MODULE: "@docker/actions-toolkit@0.67.0"
+  DOCKER_ACTIONS_TOOLKIT_MODULE: "@docker/actions-toolkit@0.71.0"
   COSIGN_VERSION: "v3.0.2"
   LOCAL_EXPORT_DIR: "/tmp/buildx-output"
   MATRIX_SIZE_LIMIT: "20"
@@ -151,7 +151,7 @@ jobs:
           INPUT_DAT-MODULE: ${{ env.DOCKER_ACTIONS_TOOLKIT_MODULE }}
         with:
           script: |
-            await exec.exec('npm', ['install', '--prefer-offline', '--no-audit', '--ignore-scripts', core.getInput('dat-module')]);
+            await exec.exec('npm', ['install', '--prefer-offline', '--ignore-scripts', core.getInput('dat-module')]);
       -
         name: Set outputs
         id: set
@@ -274,7 +274,7 @@ jobs:
           INPUT_DAT-MODULE: ${{ env.DOCKER_ACTIONS_TOOLKIT_MODULE }}
         with:
           script: |
-            await exec.exec('npm', ['install', '--prefer-offline', '--no-audit', '--ignore-scripts', core.getInput('dat-module')]);
+            await exec.exec('npm', ['install', '--prefer-offline', '--ignore-scripts', core.getInput('dat-module')]);
       -
         name: Docker meta
         id: meta
@@ -420,7 +420,12 @@ jobs:
             const { Install } = require('@docker/actions-toolkit/lib/cosign/install');
             
             const cosignInstall = new Install();
-            const cosignBinPath = await cosignInstall.download(core.getInput('cosign-version'), true, true);
+            const cosignBinPath = await cosignInstall.download({
+              version: core.getInput('cosign-version'),
+              ghaNoCache: true,
+              skipState: true,
+              verifySignature: true
+            });
             await cosignInstall.install(cosignBinPath);
             
             const cosign = new Cosign();