diff --git a/docker/connector.Dockerfile b/docker/connector.Dockerfile
index ad535d0..db70933 100644
--- a/docker/connector.Dockerfile
+++ b/docker/connector.Dockerfile
@@ -18,7 +18,7 @@ ENV CGO_ENABLED=0
 RUN --mount=type=cache,target=/root/.cache/go-build \
   go build -trimpath -ldflags="-s -w" -o connector ./cmd/admin-connector
 
-FROM gcr.io/distroless/static-debian12:nonroot@sha256:1b7b9f0f0e0a1d2155f531db587cc48ec26aaf97ab64364225f5bf18a054e66a AS runtime
+FROM gcr.io/distroless/static-debian12:nonroot@sha256:afa5c872c891853ca7fcf1f12c3edb23f7eeef36189728842dd51042ff57f7ab AS runtime
 
 USER nonroot:nonroot
 
diff --git a/docker/echo.Dockerfile b/docker/echo.Dockerfile
index 5548af6..4346d1a 100644
--- a/docker/echo.Dockerfile
+++ b/docker/echo.Dockerfile
@@ -18,7 +18,7 @@ ENV CGO_ENABLED=0
 RUN --mount=type=cache,target=/root/.cache/go-build \
   go build -trimpath -ldflags="-s -w" -o echo ./cmd/echo
 
-FROM gcr.io/distroless/static-debian12:nonroot@sha256:1b7b9f0f0e0a1d2155f531db587cc48ec26aaf97ab64364225f5bf18a054e66a AS runtime
+FROM gcr.io/distroless/static-debian12:nonroot@sha256:afa5c872c891853ca7fcf1f12c3edb23f7eeef36189728842dd51042ff57f7ab AS runtime
 
 USER nonroot:nonroot
 
diff --git a/docker/krb.Dockerfile b/docker/krb.Dockerfile
index 73833c6..b66e4ba 100644
--- a/docker/krb.Dockerfile
+++ b/docker/krb.Dockerfile
@@ -18,7 +18,7 @@ ENV CGO_ENABLED=0
 RUN --mount=type=cache,target=/root/.cache/go-build \
   go build -trimpath -ldflags="-s -w" -o kerberos .
 
-FROM gcr.io/distroless/static-debian12:nonroot@sha256:1b7b9f0f0e0a1d2155f531db587cc48ec26aaf97ab64364225f5bf18a054e66a AS runtime
+FROM gcr.io/distroless/static-debian12:nonroot@sha256:afa5c872c891853ca7fcf1f12c3edb23f7eeef36189728842dd51042ff57f7ab AS runtime
 
 USER nonroot:nonroot
 
@@ -38,7 +38,7 @@ ENTRYPOINT [ "/kerberos" ]
 # PoC-runtime image for AWS ECR. This image is used to run the PoC in AWS ECR, and as such has the PoC JSON file baked in.
 #
 
-FROM gcr.io/distroless/static-debian12:nonroot@sha256:1b7b9f0f0e0a1d2155f531db587cc48ec26aaf97ab64364225f5bf18a054e66a AS poc-runtime
+FROM gcr.io/distroless/static-debian12:nonroot@sha256:afa5c872c891853ca7fcf1f12c3edb23f7eeef36189728842dd51042ff57f7ab AS poc-runtime
 
 USER nonroot:nonroot