diff --git a/tekton/publish.yaml b/tekton/publish.yaml
index ee30747fb63..9c71037fb7c 100644
--- a/tekton/publish.yaml
+++ b/tekton/publish.yaml
@@ -61,7 +61,7 @@ spec:
   steps:
 
   - name: container-registry-auth
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:931e19c513cc0db1ae340a246b2ee339ccffb1fb39f86d35a1973196eac3c0d7
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:03a1f5afef49f817425fa8551f0e1456a3846acd6b998a0ac7d6ea6498df1f53
     script: |
       #!/busybox/sh
       set -ex
@@ -80,7 +80,7 @@ spec:
       cp ${DOCKER_CONFIG} /workspace/docker-config.json
 
   - name: create-ko-yaml
-    image: cgr.dev/chainguard/go:latest-dev@sha256:1e9e266229bb8c0e81bee511584c22fa3ccbc6a314721e856ec89585f0a801fa
+    image: cgr.dev/chainguard/go:latest-dev@sha256:beee32faa83f4598019d2468b0d611c2163e3521fb8e090925f7ce9aa38ecb4f
     script: |
       #!/bin/sh
       set -ex
@@ -115,7 +115,7 @@ spec:
       cat /workspace/.ko.yaml
 
   - name: run-ko
-    image: gcr.io/tekton-releases/dogfooding/ko@sha256:e5296fb9d87219a6e65907112e5e14e31468cade93a93025f82cf652d334ef8d
+    image: gcr.io/tekton-releases/dogfooding/ko@sha256:e28efee047ba98aa3ea0e5b2c099e1c2c80d952ac48a2df5a7fe35be4b52a5c8
     env:
     - name: KO_DOCKER_REPO
       value: $(params.imageRegistry)/$(params.imageRegistryPath)
@@ -169,7 +169,7 @@ spec:
       sed -i -e 's/\(pipeline.tekton.dev\/release\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(app.kubernetes.io\/version\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(version\): "devel"/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/release.yaml
       sed -i -e 's/\(pipeline.tekton.dev\/release\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(app.kubernetes.io\/version\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(version\): "devel"/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/release.notags.yaml
   - name: koparse
-    image: gcr.io/tekton-releases/dogfooding/koparse@sha256:2eefe19b24ea62c41ee755d50407d66f55655f1e1b5d742ae1875dfb12a4d1a2
+    image: gcr.io/tekton-releases/dogfooding/koparse@sha256:fb14e8f844c430f08c71e4b53fb61e7bb1f7a6a3a9948d40c969223b7b787061
     script: |
       set -ex
 
@@ -187,7 +187,7 @@ spec:
 
 
   - name: tag-images
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:931e19c513cc0db1ae340a246b2ee339ccffb1fb39f86d35a1973196eac3c0d7
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:03a1f5afef49f817425fa8551f0e1456a3846acd6b998a0ac7d6ea6498df1f53
     script: |
       #!/busybox/sh
       set -ex