diff --git a/build/Dockerfile b/build/Dockerfile
index c8aa24d..7ab5dc9 100644
--- a/build/Dockerfile
+++ b/build/Dockerfile
@@ -5,7 +5,7 @@
 #
 # build go binaries
 #
-FROM docker.elastic.co/wolfi/go:1.23@sha256:66d2277ba3f84288eaccef60621182f33fee7dc9d801e51afc08a1e89cbafd36 as builder
+FROM docker.elastic.co/wolfi/go:1.23.1@sha256:66f8ab6edc9815ee4e6d94d05ea8982c74ab365acce92ca861d3b2e46403bd0a as builder
 
 ARG VERSION
 ARG SHA1
@@ -28,7 +28,7 @@ RUN make build-binary generate-notice.txt
 #
 # package binaries in a lighter final image
 #
-FROM docker.elastic.co/wolfi/chainguard-base:latest@sha256:c16d3ad6cebf387e8dd2ad769f54320c4819fbbaa21e729fad087c7ae223b4d0
+FROM docker.elastic.co/wolfi/chainguard-base:latest@sha256:6fbf07849a440c8dca9aa7e9cb56ed3ecaa9eb40f8a4f36b39393d7b32d78ecc
 
 ARG IMAGE_TAG
 ENV IMAGE_TAG=$IMAGE_TAG