diff --git a/.tekton/tasks/ec-checks.yaml b/.tekton/tasks/ec-checks.yaml
index 9f7139e8a1..ca3603eb0e 100644
--- a/.tekton/tasks/ec-checks.yaml
+++ b/.tekton/tasks/ec-checks.yaml
@@ -23,7 +23,7 @@ spec:
       $(all_tasks_dir all_tasks-ec)
   - name: validate-all-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:93b784313f680299a329d8eca3c2f0a77e5a75a403613ff8c485b9e5024c9c95
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:336f410cb269d1fa15cba62a431cf471fa91dbd88dcd8b63df439761d80d831a
     script: |
       set -euo pipefail
 
@@ -37,7 +37,7 @@ spec:
       ec validate input --policy "${policy}" --output yaml --strict=true ${args[*]}
   - name: validate-build-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:93b784313f680299a329d8eca3c2f0a77e5a75a403613ff8c485b9e5024c9c95
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:336f410cb269d1fa15cba62a431cf471fa91dbd88dcd8b63df439761d80d831a
     script: |
       set -euo pipefail
 
diff --git a/pipelines/enterprise-contract.yaml b/pipelines/enterprise-contract.yaml
index 3f8a0f4eef..a8110346be 100644
--- a/pipelines/enterprise-contract.yaml
+++ b/pipelines/enterprise-contract.yaml
@@ -105,7 +105,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:5dc4dcc194bf640ea02b415a8ffebefc1e44d304ec50e23f02a23e869c8d21e2
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:58f43e4a5a610aee8ccfae2dd0536bcbe4cd9a0813b8dd22fb143167c5d7dfd0
           - name: name
             value: verify-enterprise-contract
           - name: kind