diff --git a/deploy/tasks/buildah-oci-ta.yaml b/deploy/tasks/buildah-oci-ta.yaml
index 95c014ab5..31cfd168c 100644
--- a/deploy/tasks/buildah-oci-ta.yaml
+++ b/deploy/tasks/buildah-oci-ta.yaml
@@ -236,7 +236,7 @@ spec:
         name: workdir
   steps:
     - name: use-trusted-artifact
-      image: quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:e0e457b6af10e44ff6b90208a9e69adc863a865e1c062c4cb84bf3846037d74d
+      image: quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:ff35e09ff5c89e54538b50abae241a765b2b7868f05d62c4835bebf0978f3659
       args:
         - use
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
diff --git a/deploy/tasks/maven-deployment.yaml b/deploy/tasks/maven-deployment.yaml
index b25d2a92f..52fc2ecff 100644
--- a/deploy/tasks/maven-deployment.yaml
+++ b/deploy/tasks/maven-deployment.yaml
@@ -68,7 +68,7 @@ spec:
         name: workdir
   steps:
     - name: restore-trusted-artifact
-      image: quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:52f1391e6f1c472fd10bb838f64fae2ed3320c636f536014978a5ddbdfc6b3af
+      image: quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:ff35e09ff5c89e54538b50abae241a765b2b7868f05d62c4835bebf0978f3659
       script: |
         echo "Restoring artifacts to workspace"
         URL=$IMAGE_URL
diff --git a/deploy/tasks/pre-build.yaml b/deploy/tasks/pre-build.yaml
index 717b2da8f..841f1f936 100644
--- a/deploy/tasks/pre-build.yaml
+++ b/deploy/tasks/pre-build.yaml
@@ -116,7 +116,7 @@ spec:
         - --git-disable-ssl-verification=$(params.GIT_SSL_VERIFICATION)
         - --git-reuse-repository=$(params.GIT_REUSE_REPOSITORY)
     - name: create-pre-build-image
-      image: quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:52f1391e6f1c472fd10bb838f64fae2ed3320c636f536014978a5ddbdfc6b3af
+      image: quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:ff35e09ff5c89e54538b50abae241a765b2b7868f05d62c4835bebf0978f3659
       script: |
         echo "Creating pre-build-image archive"
         create-archive --store $(params.IMAGE_URL) $(results.PRE_BUILD_IMAGE_DIGEST.path)=$(workspaces.source.path)/source
diff --git a/pkg/reconciler/dependencybuild/scripts/Dockerfile.build-trusted-artifacts b/pkg/reconciler/dependencybuild/scripts/Dockerfile.build-trusted-artifacts
index a9d0526b5..4d44bd996 100644
--- a/pkg/reconciler/dependencybuild/scripts/Dockerfile.build-trusted-artifacts
+++ b/pkg/reconciler/dependencybuild/scripts/Dockerfile.build-trusted-artifacts
@@ -1,3 +1,3 @@
 #This file is used to enable renovate to update the digests. It is updated by renovate then substituted into the golang code.
 
-FROM quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:f60a217e109434fb0a0b4a9178018871cfdf1d72177312aafedc027ec4380cac
+FROM quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:711ea3a6bc32c97080408587794d4be962067719e0778761bcb0a7e7bdcaa35b