diff --git a/install/requirements.txt b/install/requirements.txt
index f6c15d4a..918bb95e 100644
--- a/install/requirements.txt
+++ b/install/requirements.txt
@@ -480,9 +480,9 @@ requests==2.32.3 \
     #   id
     #   sigstore
     #   tuf
-rfc8785==0.1.3 \
-    --hash=sha256:167efe3b5cdd09dded9d0cfc8fec1f48f5cd9f8f13b580ada4efcac138925048 \
-    --hash=sha256:6116062831c62e7ac5d027973a1fe07b601ccd854bca4a2b401938a00a20b0c0
+rfc8785==0.1.4 \
+    --hash=sha256:520d690b448ecf0703691c76e1a34a24ddcd4fc5bc41d589cb7c58ec651bcd48 \
+    --hash=sha256:e545841329fe0eee4f6a3b44e7034343100c12b4ec566dc06ca9735681deb4da
     # via sigstore
 rich==13.8.1 \
     --hash=sha256:1760a3c0848469b97b558fc61c85233e3dafb69c7a071b4d60c38099d3cd4c06 \
@@ -495,7 +495,7 @@ securesystemslib==1.1.0 \
 sigstore==3.3.0 \
     --hash=sha256:0a4c9cd3efc0f01ac053dc9dfba95bfdc998a14c59c80342ef40a290b406758d \
     --hash=sha256:931e9913996ceace713d28e2431989414e711af30606f0b1e8bdc30fcbdd3fbe
-    # via -r requirements.in
+    # via -r install/requirements.in
 sigstore-protobuf-specs==0.3.2 \
     --hash=sha256:50c99fa6747a3a9c5c562a43602cf76df0b199af28f0e9d4319b6775630425ea \
     --hash=sha256:cae041b40502600b8a633f43c257695d0222a94efa1e5110a7ec7ada78c39d99