diff --git a/renovate.json b/renovate.json
index 2847977851..dffa999e5f 100644
--- a/renovate.json
+++ b/renovate.json
@@ -20,6 +20,7 @@
         "quay.io/redhat-appstudio/github-app-token",
         "quay.io/konflux-ci/appstudio-utils",
         "quay.io/konflux-ci/buildah",
+        "quay.io/konflux-ci/buildah-task",
         "quay.io/konflux-ci/source-container-build",
         "quay.io/redhat-appstudio/e2e-tests",
         "quay.io/redhat-appstudio/buildah",
diff --git a/task/build-image-manifest/0.1/build-image-manifest.yaml b/task/build-image-manifest/0.1/build-image-manifest.yaml
index b187880d31..18d44f9075 100644
--- a/task/build-image-manifest/0.1/build-image-manifest.yaml
+++ b/task/build-image-manifest/0.1/build-image-manifest.yaml
@@ -46,7 +46,7 @@ spec:
     - name: TLSVERIFY
       value: $(params.TLSVERIFY)
   steps:
-  - image: quay.io/konflux-ci/buildah:latest@sha256:6d41d76152f635b0cb4fe37e96255fe545709a693eeb50f9a3aa63206a372d9e
+  - image: quay.io/konflux-ci/buildah-task:latest@sha256:927517719bc44bb43bc881fef869f830e8d00ad76cee3c083c2dc5f925f99e16
     # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
     # the cluster will set imagePullPolicy to IfNotPresent
     name: build
diff --git a/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml
index 76bdfa2c71..97161cb32b 100644
--- a/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml
+++ b/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml
@@ -201,7 +201,7 @@ spec:
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
         - $(params.CACHI2_ARTIFACT)=/var/workdir/cachi2
     - name: build
-      image: quay.io/konflux-ci/buildah:latest@sha256:6d41d76152f635b0cb4fe37e96255fe545709a693eeb50f9a3aa63206a372d9e
+      image: quay.io/konflux-ci/buildah-task:latest@sha256:927517719bc44bb43bc881fef869f830e8d00ad76cee3c083c2dc5f925f99e16
       args:
         - $(params.BUILD_ARGS[*])
       workingDir: /var/workdir
@@ -490,7 +490,7 @@ spec:
       securityContext:
         runAsUser: 0
     - name: inject-sbom-and-push
-      image: quay.io/konflux-ci/buildah:latest@sha256:6d41d76152f635b0cb4fe37e96255fe545709a693eeb50f9a3aa63206a372d9e
+      image: quay.io/konflux-ci/buildah-task:latest@sha256:927517719bc44bb43bc881fef869f830e8d00ad76cee3c083c2dc5f925f99e16
       workingDir: /var/workdir
       volumeMounts:
         - mountPath: /var/lib/containers
diff --git a/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml
index 28f0bfb6c0..8120d3bbda 100644
--- a/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml
+++ b/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml
@@ -169,7 +169,7 @@ spec:
     - name: YUM_REPOS_D_TARGET
       value: $(params.YUM_REPOS_D_TARGET)
     - name: BUILDER_IMAGE
-      value: quay.io/konflux-ci/buildah:latest@sha256:6d41d76152f635b0cb4fe37e96255fe545709a693eeb50f9a3aa63206a372d9e
+      value: quay.io/konflux-ci/buildah-task:latest@sha256:927517719bc44bb43bc881fef869f830e8d00ad76cee3c083c2dc5f925f99e16
     volumeMounts:
     - mountPath: /shared
       name: shared
@@ -563,7 +563,7 @@ spec:
       runAsUser: 0
     workingDir: /var/workdir
   - computeResources: {}
-    image: quay.io/konflux-ci/buildah:latest@sha256:6d41d76152f635b0cb4fe37e96255fe545709a693eeb50f9a3aa63206a372d9e
+    image: quay.io/konflux-ci/buildah-task:latest@sha256:927517719bc44bb43bc881fef869f830e8d00ad76cee3c083c2dc5f925f99e16
     name: inject-sbom-and-push
     script: |
       base_image_name=$(buildah inspect --format '{{ index .ImageAnnotations "org.opencontainers.image.base.name"}}' $IMAGE | cut -f1 -d'@')
diff --git a/task/buildah-remote/0.1/buildah-remote.yaml b/task/buildah-remote/0.1/buildah-remote.yaml
index b39f1ebd78..747aca1f58 100644
--- a/task/buildah-remote/0.1/buildah-remote.yaml
+++ b/task/buildah-remote/0.1/buildah-remote.yaml
@@ -166,7 +166,7 @@ spec:
     - name: SQUASH
       value: $(params.SQUASH)
     - name: BUILDER_IMAGE
-      value: quay.io/konflux-ci/buildah:latest@sha256:6d41d76152f635b0cb4fe37e96255fe545709a693eeb50f9a3aa63206a372d9e
+      value: qquay.io/konflux-ci/buildah-task:latest@sha256:927517719bc44bb43bc881fef869f830e8d00ad76cee3c083c2dc5f925f99e16
     volumeMounts:
     - mountPath: /shared
       name: shared
@@ -556,7 +556,7 @@ spec:
       runAsUser: 0
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: quay.io/konflux-ci/buildah:latest@sha256:6d41d76152f635b0cb4fe37e96255fe545709a693eeb50f9a3aa63206a372d9e
+    image: quay.io/konflux-ci/buildah-task:latest@sha256:927517719bc44bb43bc881fef869f830e8d00ad76cee3c083c2dc5f925f99e16
     name: inject-sbom-and-push
     script: |
       if [ -n "${PARAM_BUILDER_IMAGE}" ]; then
diff --git a/task/buildah/0.1/buildah.yaml b/task/buildah/0.1/buildah.yaml
index a65e73b918..699099a53b 100644
--- a/task/buildah/0.1/buildah.yaml
+++ b/task/buildah/0.1/buildah.yaml
@@ -155,7 +155,7 @@ spec:
       value: $(params.SQUASH)
 
   steps:
-  - image: quay.io/konflux-ci/buildah:latest@sha256:6d41d76152f635b0cb4fe37e96255fe545709a693eeb50f9a3aa63206a372d9e
+  - image: quay.io/konflux-ci/buildah-task:latest@sha256:927517719bc44bb43bc881fef869f830e8d00ad76cee3c083c2dc5f925f99e16
     name: build
     computeResources:
       limits:
@@ -458,7 +458,7 @@ spec:
       runAsUser: 0
 
   - name: inject-sbom-and-push
-    image: quay.io/konflux-ci/buildah:latest@sha256:6d41d76152f635b0cb4fe37e96255fe545709a693eeb50f9a3aa63206a372d9e
+    image: quay.io/konflux-ci/buildah-task:latest@sha256:927517719bc44bb43bc881fef869f830e8d00ad76cee3c083c2dc5f925f99e16
     computeResources: {}
     script: |
       if [ -n "${PARAM_BUILDER_IMAGE}" ]; then