diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 12368e5d..424121db 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ jobs:
         if: github.event_name != 'pull_request'
         uses: sigstore/cosign-installer@main
         with:
-          cosign-release: 'v2.0.2' # optional
+          cosign-release: 'v2.2.2' # optional
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4b4e9c3e2d4531116a6f8ba8e71fc6e2cb6e6c8c
diff --git a/projects/views.py b/projects/views.py
index efc17bbf..9f0d3e95 100644
--- a/projects/views.py
+++ b/projects/views.py
@@ -415,8 +415,12 @@ def view_project(request, project_id):
                 if role_name == 'manager':
                     # delete user budgets for the user if they are manager
                     user = User.objects.get(username=role_username)
-                    user_budget = ChargeBudget.objects.get(user=user, project=portal_project)
-                    if user_budget:
+                    try:
+                        user_budget = ChargeBudget.objects.get(user=user, project=portal_project)
+                    except ChargeBudget.DoesNotExist:
+                        # the user does not have a budget created, no-op
+                        pass
+                    else:
                         user_budget.delete()
             except Exception:
                 logger.exception("Failed to change user role")