diff --git a/.tekton/tasks/ec-checks.yaml b/.tekton/tasks/ec-checks.yaml
index 6c34ceacc9..04ad50214b 100644
--- a/.tekton/tasks/ec-checks.yaml
+++ b/.tekton/tasks/ec-checks.yaml
@@ -24,7 +24,7 @@ spec:
       $(all_tasks_dir all_tasks-ec)
   - name: validate-all-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:3bed976c747bddc406966beeed484b838649e21b0d38eb113a49790ae4512e6e
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:3d9c4a6468a7bff3958c2845f0faca982484c11ba9a335cdae4b1c4f5066da63
     script: |
       set -euo pipefail
 
@@ -38,7 +38,7 @@ spec:
       ec validate input --policy "${policy}" --output yaml --strict=true ${args[*]}
   - name: validate-build-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:3bed976c747bddc406966beeed484b838649e21b0d38eb113a49790ae4512e6e
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:3d9c4a6468a7bff3958c2845f0faca982484c11ba9a335cdae4b1c4f5066da63
     script: |
       set -euo pipefail
 
diff --git a/pipelines/enterprise-contract-everything.yaml b/pipelines/enterprise-contract-everything.yaml
index 1d528a9486..bb1dd69058 100644
--- a/pipelines/enterprise-contract-everything.yaml
+++ b/pipelines/enterprise-contract-everything.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:bf6f20badff9cd473b607c96d3125b40a30e3cd564efe450837f486d6ffbb05a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:dafce7ea773fb1f9541fbe71d147c9105c8aee6c7ab24aa51f14d51052bf511a
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract-redhat-no-hermetic.yaml b/pipelines/enterprise-contract-redhat-no-hermetic.yaml
index 0ab34d1ee7..bb7689f8bf 100644
--- a/pipelines/enterprise-contract-redhat-no-hermetic.yaml
+++ b/pipelines/enterprise-contract-redhat-no-hermetic.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:bf6f20badff9cd473b607c96d3125b40a30e3cd564efe450837f486d6ffbb05a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:dafce7ea773fb1f9541fbe71d147c9105c8aee6c7ab24aa51f14d51052bf511a
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract-redhat.yaml b/pipelines/enterprise-contract-redhat.yaml
index 4f449a6f00..1a826a4cdb 100644
--- a/pipelines/enterprise-contract-redhat.yaml
+++ b/pipelines/enterprise-contract-redhat.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:bf6f20badff9cd473b607c96d3125b40a30e3cd564efe450837f486d6ffbb05a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:dafce7ea773fb1f9541fbe71d147c9105c8aee6c7ab24aa51f14d51052bf511a
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract-slsa3.yaml b/pipelines/enterprise-contract-slsa3.yaml
index 8e208be4da..c0f3558adb 100644
--- a/pipelines/enterprise-contract-slsa3.yaml
+++ b/pipelines/enterprise-contract-slsa3.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:bf6f20badff9cd473b607c96d3125b40a30e3cd564efe450837f486d6ffbb05a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:dafce7ea773fb1f9541fbe71d147c9105c8aee6c7ab24aa51f14d51052bf511a
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract.yaml b/pipelines/enterprise-contract.yaml
index 4ab9af15d7..6a3e393500 100644
--- a/pipelines/enterprise-contract.yaml
+++ b/pipelines/enterprise-contract.yaml
@@ -66,7 +66,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:bf6f20badff9cd473b607c96d3125b40a30e3cd564efe450837f486d6ffbb05a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:dafce7ea773fb1f9541fbe71d147c9105c8aee6c7ab24aa51f14d51052bf511a
           - name: name
             value: verify-enterprise-contract
           - name: kind