diff --git a/build/Dockerfile b/build/Dockerfile
index 2e5b5af..ad92b80 100644
--- a/build/Dockerfile
+++ b/build/Dockerfile
@@ -5,7 +5,7 @@
 #
 # build go binaries
 #
-FROM docker.elastic.co/wolfi/go:1.23.2@sha256:c803932f172fc7be7b056b42159d9575cbbfdd077e326cc46013cc754b2b18d4 as builder
+FROM docker.elastic.co/wolfi/go:1.23.2@sha256:b2088e9cc1d086cb404e3b098e6ee49e3cfe45ac443d2f7937674a851a8c9949 as builder
 
 ARG VERSION
 ARG SHA1
@@ -28,7 +28,7 @@ RUN make build-binary generate-notice.txt
 #
 # package binaries in a lighter final image
 #
-FROM docker.elastic.co/wolfi/chainguard-base:latest@sha256:973431347ad45f40e01afbbd010bf9de929c088a63382239b90dd84f39618bc8
+FROM docker.elastic.co/wolfi/chainguard-base:latest@sha256:7082adcc2c4380be273ab5b80c4a762b4f17279c13c6fc8f87a60190aee2e2cd
 
 ARG IMAGE_TAG
 ENV IMAGE_TAG=$IMAGE_TAG