diff --git a/pkgs/carvel-dev/imgpkg/pkg.yaml b/pkgs/carvel-dev/imgpkg/pkg.yaml
index a673fcf33a5..b1e5df2d62c 100644
--- a/pkgs/carvel-dev/imgpkg/pkg.yaml
+++ b/pkgs/carvel-dev/imgpkg/pkg.yaml
@@ -1,5 +1,7 @@
 packages:
   - name: carvel-dev/imgpkg@v0.44.2
+  - name: carvel-dev/imgpkg
+    version: v0.39.0
   - name: carvel-dev/imgpkg
     version: v0.35.0
   - name: carvel-dev/imgpkg
diff --git a/pkgs/carvel-dev/imgpkg/registry.yaml b/pkgs/carvel-dev/imgpkg/registry.yaml
index 6580acc9404..0a7ea9accae 100644
--- a/pkgs/carvel-dev/imgpkg/registry.yaml
+++ b/pkgs/carvel-dev/imgpkg/registry.yaml
@@ -79,6 +79,14 @@ packages:
           - darwin
           - windows
           - amd64
+      - version_constraint: semver("< 0.40.0")
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        windows_arm_emulation: true
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
       - version_constraint: "true"
         asset: imgpkg-{{.OS}}-{{.Arch}}
         format: raw
@@ -87,3 +95,13 @@ packages:
           type: github_release
           asset: checksums.txt
           algorithm: sha256
+          cosign:
+            opts:
+              - --certificate-identity
+              - https://github.com/carvel-dev/imgpkg/.github/workflows/release.yml@refs/tags/{{.Version}}
+              - --certificate-oidc-issuer
+              - https://token.actions.githubusercontent.com
+              - --signature
+              - https://github.com/carvel-dev/imgpkg/releases/download/{{.Version}}/checksums.txt.sig
+              - --certificate
+              - https://github.com/carvel-dev/imgpkg/releases/download/{{.Version}}/checksums.txt.pem
diff --git a/registry.yaml b/registry.yaml
index cb43d15d3ff..5c1cc22136b 100644
--- a/registry.yaml
+++ b/registry.yaml
@@ -13208,6 +13208,14 @@ packages:
           - darwin
           - windows
           - amd64
+      - version_constraint: semver("< 0.40.0")
+        asset: imgpkg-{{.OS}}-{{.Arch}}
+        format: raw
+        windows_arm_emulation: true
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
       - version_constraint: "true"
         asset: imgpkg-{{.OS}}-{{.Arch}}
         format: raw
@@ -13216,6 +13224,16 @@ packages:
           type: github_release
           asset: checksums.txt
           algorithm: sha256
+          cosign:
+            opts:
+              - --certificate-identity
+              - https://github.com/carvel-dev/imgpkg/.github/workflows/release.yaml@refs/tags/{{.Version}}
+              - --certificate-oidc-issuer
+              - https://token.actions.githubusercontent.com
+              - --signature
+              - https://github.com/carvel-dev/imgpkg/releases/download/{{.Version}}/checksums.txt.sig
+              - --certificate
+              - https://github.com/carvel-dev/imgpkg/releases/download/{{.Version}}/checksums.txt.pem
   - type: github_release
     repo_owner: carvel-dev
     repo_name: kapp