diff --git a/tasks/verify-definition/0.1/verify-definition.yaml b/tasks/verify-definition/0.1/verify-definition.yaml
index ef9191f..e93b095 100644
--- a/tasks/verify-definition/0.1/verify-definition.yaml
+++ b/tasks/verify-definition/0.1/verify-definition.yaml
@@ -60,13 +60,13 @@ spec:
         value: "$(params.HOMEDIR)"
   steps:
     - name: version
-      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:f3579ad17b0998dac100681bb55b4255ecc4754689a304d70c82f9f86927698f
+      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2b4feb2d92941354c33121fd4ca2a8c34e0a6cc2761e41de6c23a3fc3e7fb303
       command: [ec]
       args:
         - version
     - name: validate
       workingDir: "$(workspaces.output.path)"
-      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:f3579ad17b0998dac100681bb55b4255ecc4754689a304d70c82f9f86927698f
+      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2b4feb2d92941354c33121fd4ca2a8c34e0a6cc2761e41de6c23a3fc3e7fb303
       command: [ec]
       args:
         - validate
diff --git a/tasks/verify-enterprise-contract/0.1/verify-enterprise-contract.yaml b/tasks/verify-enterprise-contract/0.1/verify-enterprise-contract.yaml
index 746a406..7c4ffc0 100644
--- a/tasks/verify-enterprise-contract/0.1/verify-enterprise-contract.yaml
+++ b/tasks/verify-enterprise-contract/0.1/verify-enterprise-contract.yaml
@@ -121,12 +121,12 @@ spec:
 
   steps:
     - name: version
-      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:f3579ad17b0998dac100681bb55b4255ecc4754689a304d70c82f9f86927698f
+      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2b4feb2d92941354c33121fd4ca2a8c34e0a6cc2761e41de6c23a3fc3e7fb303
       command: [ec]
       args:
         - version
     - name: initialize-tuf
-      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:f3579ad17b0998dac100681bb55b4255ecc4754689a304d70c82f9f86927698f
+      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2b4feb2d92941354c33121fd4ca2a8c34e0a6cc2761e41de6c23a3fc3e7fb303
       script: |-
         set -euo pipefail
 
@@ -142,7 +142,7 @@ spec:
         - name: TUF_MIRROR
           value: "$(params.TUF_MIRROR)"
     - name: validate
-      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:f3579ad17b0998dac100681bb55b4255ecc4754689a304d70c82f9f86927698f
+      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2b4feb2d92941354c33121fd4ca2a8c34e0a6cc2761e41de6c23a3fc3e7fb303
       command: [ec]
       args:
         - validate
@@ -181,28 +181,28 @@ spec:
           # will contain a trailing ":" - this is ok.
           value: "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs:/system/etc/security/cacerts:$(params.SSL_CERT_DIR)"
     - name: report
-      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:f3579ad17b0998dac100681bb55b4255ecc4754689a304d70c82f9f86927698f
+      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2b4feb2d92941354c33121fd4ca2a8c34e0a6cc2761e41de6c23a3fc3e7fb303
       command: [cat]
       args:
         - "$(params.HOMEDIR)/report.yaml"
     - name: data
-      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:f3579ad17b0998dac100681bb55b4255ecc4754689a304d70c82f9f86927698f
+      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2b4feb2d92941354c33121fd4ca2a8c34e0a6cc2761e41de6c23a3fc3e7fb303
       command: [cat]
       args:
         - "$(params.HOMEDIR)/data.yaml"
     - name: attestations
-      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:f3579ad17b0998dac100681bb55b4255ecc4754689a304d70c82f9f86927698f
+      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2b4feb2d92941354c33121fd4ca2a8c34e0a6cc2761e41de6c23a3fc3e7fb303
       command: [cat]
       args:
         - "$(params.HOMEDIR)/attestations.jsonl"
     - name: summary
-      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:f3579ad17b0998dac100681bb55b4255ecc4754689a304d70c82f9f86927698f
+      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2b4feb2d92941354c33121fd4ca2a8c34e0a6cc2761e41de6c23a3fc3e7fb303
       command: [jq]
       args:
         - "."
         - "$(results.TEST_OUTPUT.path)"
     - name: assert
-      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:f3579ad17b0998dac100681bb55b4255ecc4754689a304d70c82f9f86927698f
+      image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2b4feb2d92941354c33121fd4ca2a8c34e0a6cc2761e41de6c23a3fc3e7fb303
       command: [jq]
       args:
         - "--argjson"