diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b3b1e83..8208c68 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,14 +25,23 @@ jobs:
 
       - name: setup required binaries
         run: |
-          go mod tidy
-          go build -o gri .
+          curl -O -L "https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64"
+          sudo mv cosign-linux-amd64 /usr/local/bin/cosign
+          sudo chmod +x /usr/local/bin/cosign
 
-          ./gri set-install-dir /usr/local/bin
+          curl -sSfL https://get.anchore.io/syft | sudo sh -s -- -b /usr/local/bin
+
+      # - name: setup required binaries
+      #   run: |
+      #     go mod tidy
+      #     go build -o gri .
+
+      #     ./gri set-install-dir /usr/local/bin
+          
+      #     # sudo ./gri sigstore/cosign
+      #     sudo ./gri anchore/syft
+      #     which syft
 
-          sudo ./gri sigstore/cosign
-          sudo ./gri anchore/syft
-          which syft
 
       # - name: Run GoReleaser
       #   uses: goreleaser/goreleaser-action@v6