diff --git a/.tekton/tasks/ec-checks.yaml b/.tekton/tasks/ec-checks.yaml
index 90789fb650..8b92670a31 100644
--- a/.tekton/tasks/ec-checks.yaml
+++ b/.tekton/tasks/ec-checks.yaml
@@ -23,7 +23,7 @@ spec:
       $(all_tasks_dir all_tasks-ec)
   - name: validate-all-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:a372807cc4cfb8bebf41b8ae3a79b53c3ae94a07e3659517f92ea9e10e760d5b
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:984e8e38b506753aced7b25e8feb86311d221dd60f6ae6d97f18fbb056944c47
     script: |
       set -euo pipefail
 
@@ -37,7 +37,7 @@ spec:
       ec validate input --policy "${policy}" --output yaml --strict=true ${args[*]}
   - name: validate-build-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:a372807cc4cfb8bebf41b8ae3a79b53c3ae94a07e3659517f92ea9e10e760d5b
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:984e8e38b506753aced7b25e8feb86311d221dd60f6ae6d97f18fbb056944c47
     script: |
       set -euo pipefail
 
diff --git a/pipelines/enterprise-contract.yaml b/pipelines/enterprise-contract.yaml
index 9f780b0dfb..30fbe77af2 100644
--- a/pipelines/enterprise-contract.yaml
+++ b/pipelines/enterprise-contract.yaml
@@ -109,7 +109,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:978d48e842a3d7060035f8006b43f3aec84eb87deac3ada47a32b19d96417cbc
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:1f8be035908946f69a15de500570597990c6011c776cb4eb2aad9a681b2cbff0
           - name: name
             value: verify-enterprise-contract
           - name: kind