diff --git a/.tekton/tasks/ec-checks.yaml b/.tekton/tasks/ec-checks.yaml
index 6c34ceacc9..f850f2fb50 100644
--- a/.tekton/tasks/ec-checks.yaml
+++ b/.tekton/tasks/ec-checks.yaml
@@ -24,7 +24,7 @@ spec:
       $(all_tasks_dir all_tasks-ec)
   - name: validate-all-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:3bed976c747bddc406966beeed484b838649e21b0d38eb113a49790ae4512e6e
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:ca81df41736bcc949ef6707dc4ae0797933dfe1907c471b4133dd3d42c0b4919
     script: |
       set -euo pipefail
 
@@ -38,7 +38,7 @@ spec:
       ec validate input --policy "${policy}" --output yaml --strict=true ${args[*]}
   - name: validate-build-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:3bed976c747bddc406966beeed484b838649e21b0d38eb113a49790ae4512e6e
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:ca81df41736bcc949ef6707dc4ae0797933dfe1907c471b4133dd3d42c0b4919
     script: |
       set -euo pipefail
 
diff --git a/pipelines/enterprise-contract-everything.yaml b/pipelines/enterprise-contract-everything.yaml
index 1d528a9486..83b3fcb99b 100644
--- a/pipelines/enterprise-contract-everything.yaml
+++ b/pipelines/enterprise-contract-everything.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:bf6f20badff9cd473b607c96d3125b40a30e3cd564efe450837f486d6ffbb05a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:a0d186b12efd89d9563d2997a45d435ceb2e07dd0783ab876af474a27a9f537e
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract-redhat-no-hermetic.yaml b/pipelines/enterprise-contract-redhat-no-hermetic.yaml
index 0ab34d1ee7..8c075ef131 100644
--- a/pipelines/enterprise-contract-redhat-no-hermetic.yaml
+++ b/pipelines/enterprise-contract-redhat-no-hermetic.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:bf6f20badff9cd473b607c96d3125b40a30e3cd564efe450837f486d6ffbb05a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:a0d186b12efd89d9563d2997a45d435ceb2e07dd0783ab876af474a27a9f537e
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract-redhat.yaml b/pipelines/enterprise-contract-redhat.yaml
index 4f449a6f00..6c48bdf3a9 100644
--- a/pipelines/enterprise-contract-redhat.yaml
+++ b/pipelines/enterprise-contract-redhat.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:bf6f20badff9cd473b607c96d3125b40a30e3cd564efe450837f486d6ffbb05a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:a0d186b12efd89d9563d2997a45d435ceb2e07dd0783ab876af474a27a9f537e
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract-slsa3.yaml b/pipelines/enterprise-contract-slsa3.yaml
index 8e208be4da..ba7a61cf11 100644
--- a/pipelines/enterprise-contract-slsa3.yaml
+++ b/pipelines/enterprise-contract-slsa3.yaml
@@ -65,7 +65,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:bf6f20badff9cd473b607c96d3125b40a30e3cd564efe450837f486d6ffbb05a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:a0d186b12efd89d9563d2997a45d435ceb2e07dd0783ab876af474a27a9f537e
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/pipelines/enterprise-contract.yaml b/pipelines/enterprise-contract.yaml
index 4ab9af15d7..b21b762b06 100644
--- a/pipelines/enterprise-contract.yaml
+++ b/pipelines/enterprise-contract.yaml
@@ -66,7 +66,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:bf6f20badff9cd473b607c96d3125b40a30e3cd564efe450837f486d6ffbb05a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:a0d186b12efd89d9563d2997a45d435ceb2e07dd0783ab876af474a27a9f537e
           - name: name
             value: verify-enterprise-contract
           - name: kind