diff --git a/.tekton/tasks/ec-checks.yaml b/.tekton/tasks/ec-checks.yaml
index 91b102eea0..579636061c 100644
--- a/.tekton/tasks/ec-checks.yaml
+++ b/.tekton/tasks/ec-checks.yaml
@@ -23,7 +23,7 @@ spec:
       $(all_tasks_dir all_tasks-ec)
   - name: validate-all-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:7cf73d24fbec8e443c0659ed0291593657b02f3f10ea9b2991a369afedfee23e
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:253c893ed3cc758a55f5aa07f72f630b630f7a69f9dd179967d163e42b34b2f3
     script: |
       set -euo pipefail
 
@@ -37,7 +37,7 @@ spec:
       ec validate input --policy "${policy}" --output yaml --strict=true ${args[*]}
   - name: validate-build-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:7cf73d24fbec8e443c0659ed0291593657b02f3f10ea9b2991a369afedfee23e
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:253c893ed3cc758a55f5aa07f72f630b630f7a69f9dd179967d163e42b34b2f3
     script: |
       set -euo pipefail
 
diff --git a/pipelines/enterprise-contract.yaml b/pipelines/enterprise-contract.yaml
index f962b55867..6f73d787c0 100644
--- a/pipelines/enterprise-contract.yaml
+++ b/pipelines/enterprise-contract.yaml
@@ -80,7 +80,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:880efba0d6c432aab8b8dd96c0ebd36b5192beabde56a1f56ec29dd6bc94094f
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:3e11f186f4fd69c4bb02243f41d25413043c8ba4611e12c701f11356764b05a4
           - name: name
             value: verify-enterprise-contract
           - name: kind