diff --git a/.tekton/tasks/ec-checks.yaml b/.tekton/tasks/ec-checks.yaml
index 751b6aab31..530a4cd784 100644
--- a/.tekton/tasks/ec-checks.yaml
+++ b/.tekton/tasks/ec-checks.yaml
@@ -23,7 +23,7 @@ spec:
       $(all_tasks_dir all_tasks-ec)
   - name: validate-all-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2784e6899ce02e8a5a46a8a74846f8ab33a4a816a1c6c712c6c18f05998ccabc
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:6d3e36298b7e14d3a1db3468df90640af206e1d14aceac8ea892adf9d77f2027
     script: |
       set -euo pipefail
 
@@ -37,7 +37,7 @@ spec:
       ec validate input --policy "${policy}" --output yaml --strict=true ${args[*]}
   - name: validate-build-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2784e6899ce02e8a5a46a8a74846f8ab33a4a816a1c6c712c6c18f05998ccabc
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:6d3e36298b7e14d3a1db3468df90640af206e1d14aceac8ea892adf9d77f2027
     script: |
       set -euo pipefail
 
diff --git a/pipelines/enterprise-contract.yaml b/pipelines/enterprise-contract.yaml
index 7fb821475d..187d50c31a 100644
--- a/pipelines/enterprise-contract.yaml
+++ b/pipelines/enterprise-contract.yaml
@@ -109,7 +109,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:77614bf616ebf481d6d704a0295d89f6d8fbbd74feecb7ce5394a60633bf22a3
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:89a1f811f68d68248b7cdacf950ce4e77af783cb2c7c6951cff35fc6fd058816
           - name: name
             value: verify-enterprise-contract
           - name: kind