diff --git a/tekton/publish.yaml b/tekton/publish.yaml
index 1011cba3258..18bb870b7d2 100644
--- a/tekton/publish.yaml
+++ b/tekton/publish.yaml
@@ -61,7 +61,7 @@ spec:
   steps:
 
   - name: container-registry-auth
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:9236ef47ac45a3b69952eef630708274aea6c47d64818eb3945c3b7fd912a436
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:4c911de8efcc98b65bb1e80e4e65829b958237e4b659946916fa2a6e7d6d99bf
     script: |
       #!/bin/sh
       set -ex
@@ -80,7 +80,7 @@ spec:
       cp ${DOCKER_CONFIG} /workspace/docker-config.json
 
   - name: create-ko-yaml
-    image: cgr.dev/chainguard/go:latest-dev@sha256:0d7852662f5183e72b32eb7ef8306bf48f32846d5c20f0481ec2a5b127918929
+    image: cgr.dev/chainguard/go:latest-dev@sha256:beea702e189375a029b9e4dacfd24a6313bdc710e61153d05747f7db5332c7e3
     script: |
       #!/bin/sh
       set -ex
@@ -115,7 +115,7 @@ spec:
       cat /workspace/.ko.yaml
 
   - name: run-ko
-    image: gcr.io/tekton-releases/dogfooding/ko@sha256:d78b4e0150731806067a9d89b01b6d1d12e52f437890f32fcfc36999599cc399
+    image: gcr.io/tekton-releases/dogfooding/ko@sha256:e0931a118afafa249f2f02920ab45552c87b7bdaa8e5a09417fb140cfdea8a18
     env:
     - name: KO_DOCKER_REPO
       value: $(params.imageRegistry)/$(params.imageRegistryPath)
@@ -169,7 +169,7 @@ spec:
       sed -i -e 's/\(pipeline.tekton.dev\/release\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(app.kubernetes.io\/version\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(version\): "devel"/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/release.yaml
       sed -i -e 's/\(pipeline.tekton.dev\/release\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(app.kubernetes.io\/version\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(version\): "devel"/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/release.notags.yaml
   - name: koparse
-    image: gcr.io/tekton-releases/dogfooding/koparse@sha256:7617499251cac2fd1ba02e4bf09dae4a011cd6e06f3736b08b7fa344dcb4d487
+    image: gcr.io/tekton-releases/dogfooding/koparse@sha256:d5e0b6cc95e4954c05ecba59ce6543e74cdc6a10fb727e7e91f0a0b497eb5629
     script: |
       set -ex
 
@@ -187,7 +187,7 @@ spec:
 
 
   - name: tag-images
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:9236ef47ac45a3b69952eef630708274aea6c47d64818eb3945c3b7fd912a436
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:4c911de8efcc98b65bb1e80e4e65829b958237e4b659946916fa2a6e7d6d99bf
     script: |
       #!/bin/sh
       set -ex