diff --git a/.tekton/tasks/ec-checks.yaml b/.tekton/tasks/ec-checks.yaml
index 04ad50214b..b4f4c983b9 100644
--- a/.tekton/tasks/ec-checks.yaml
+++ b/.tekton/tasks/ec-checks.yaml
@@ -24,7 +24,7 @@ spec:
       $(all_tasks_dir all_tasks-ec)
   - name: validate-all-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:3d9c4a6468a7bff3958c2845f0faca982484c11ba9a335cdae4b1c4f5066da63
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:6fe0935cdd344d37cb800713697a09496979ab193aafe93b04482ada1274728d
     script: |
       set -euo pipefail
 
@@ -38,7 +38,7 @@ spec:
       ec validate input --policy "${policy}" --output yaml --strict=true ${args[*]}
   - name: validate-build-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:3d9c4a6468a7bff3958c2845f0faca982484c11ba9a335cdae4b1c4f5066da63
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:6fe0935cdd344d37cb800713697a09496979ab193aafe93b04482ada1274728d
     script: |
       set -euo pipefail
 
diff --git a/pipelines/enterprise-contract-everything.yaml b/pipelines/enterprise-contract-everything.yaml
index bb1dd69058..49d093f88f 100644
--- a/pipelines/enterprise-contract-everything.yaml
+++ b/pipelines/enterprise-contract-everything.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:dafce7ea773fb1f9541fbe71d147c9105c8aee6c7ab24aa51f14d51052bf511a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:c3f1a210299075e4c719ea503f10343dc7ac28b08c67e1c25ee3fefd8123d27e
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract-redhat-no-hermetic.yaml b/pipelines/enterprise-contract-redhat-no-hermetic.yaml
index bb7689f8bf..5c0f6124b8 100644
--- a/pipelines/enterprise-contract-redhat-no-hermetic.yaml
+++ b/pipelines/enterprise-contract-redhat-no-hermetic.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:dafce7ea773fb1f9541fbe71d147c9105c8aee6c7ab24aa51f14d51052bf511a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:c3f1a210299075e4c719ea503f10343dc7ac28b08c67e1c25ee3fefd8123d27e
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract-redhat.yaml b/pipelines/enterprise-contract-redhat.yaml
index 1a826a4cdb..73becfc2ae 100644
--- a/pipelines/enterprise-contract-redhat.yaml
+++ b/pipelines/enterprise-contract-redhat.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:dafce7ea773fb1f9541fbe71d147c9105c8aee6c7ab24aa51f14d51052bf511a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:c3f1a210299075e4c719ea503f10343dc7ac28b08c67e1c25ee3fefd8123d27e
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract-slsa3.yaml b/pipelines/enterprise-contract-slsa3.yaml
index c0f3558adb..c0c99e6da8 100644
--- a/pipelines/enterprise-contract-slsa3.yaml
+++ b/pipelines/enterprise-contract-slsa3.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:dafce7ea773fb1f9541fbe71d147c9105c8aee6c7ab24aa51f14d51052bf511a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:c3f1a210299075e4c719ea503f10343dc7ac28b08c67e1c25ee3fefd8123d27e
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract.yaml b/pipelines/enterprise-contract.yaml
index 6a3e393500..699997cb42 100644
--- a/pipelines/enterprise-contract.yaml
+++ b/pipelines/enterprise-contract.yaml
@@ -66,7 +66,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:dafce7ea773fb1f9541fbe71d147c9105c8aee6c7ab24aa51f14d51052bf511a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:c3f1a210299075e4c719ea503f10343dc7ac28b08c67e1c25ee3fefd8123d27e
           - name: name
             value: verify-enterprise-contract
           - name: kind