From 8a16a67fbfa7b5c24e82543f55787e77ff064187 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 15 Jan 2025 13:01:37 +0000
Subject: [PATCH] chore(deps): update build

---
 task/apply-tags/0.1/apply-tags.yaml                         | 4 ++--
 task/build-image-index/0.1/build-image-index.yaml           | 2 +-
 task/buildah-oci-ta/0.1/buildah-oci-ta.yaml                 | 6 +++---
 task/buildah-oci-ta/0.2/buildah-oci-ta.yaml                 | 6 +++---
 task/buildah-oci-ta/0.3/buildah-oci-ta.yaml                 | 6 +++---
 task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml   | 6 +++---
 task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml   | 6 +++---
 task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml   | 6 +++---
 task/buildah-remote/0.1/buildah-remote.yaml                 | 6 +++---
 task/buildah-remote/0.2/buildah-remote.yaml                 | 6 +++---
 task/buildah-remote/0.3/buildah-remote.yaml                 | 6 +++---
 task/buildah-rhtap/0.1/buildah-rhtap.yaml                   | 2 +-
 task/buildah/0.1/buildah.yaml                               | 6 +++---
 task/buildah/0.2/buildah.yaml                               | 6 +++---
 task/buildah/0.3/buildah.yaml                               | 6 +++---
 task/generate-labels/0.1/generate-labels.yaml               | 2 +-
 task/init/0.2/init.yaml                                     | 2 +-
 .../0.1/prefetch-dependencies-oci-ta.yaml                   | 4 ++--
 task/prefetch-dependencies-oci-ta/0.1/recipe.yaml           | 2 +-
 task/prefetch-dependencies/0.1/prefetch-dependencies.yaml   | 2 +-
 task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml | 2 +-
 task/push-dockerfile/0.1/push-dockerfile.yaml               | 2 +-
 task/source-build-oci-ta/0.1/source-build-oci-ta.yaml       | 2 +-
 task/source-build/0.1/source-build.yaml                     | 2 +-
 task/summary/0.1/summary.yaml                               | 2 +-
 .../0.1/update-infra-deployments.yaml                       | 2 +-
 26 files changed, 52 insertions(+), 52 deletions(-)

diff --git a/task/apply-tags/0.1/apply-tags.yaml b/task/apply-tags/0.1/apply-tags.yaml
index 338892dec8..39af87a932 100644
--- a/task/apply-tags/0.1/apply-tags.yaml
+++ b/task/apply-tags/0.1/apply-tags.yaml
@@ -34,7 +34,7 @@ spec:
         readOnly: true
   steps:
     - name: apply-additional-tags-from-parameter
-      image: registry.access.redhat.com/ubi9/skopeo:9.5-1734513455@sha256:ed14fc6a175289cc72ffb122ebc02db0e7f448a2ed6169472347aaeb0c12c373
+      image: registry.access.redhat.com/ubi9/skopeo:9.5-1736426934@sha256:95f1267a84f36b47d3103b8ff57ec8555d1e95f0fa269a902b5652bf0fd2dc69
       args:
         - $(params.ADDITIONAL_TAGS[*])
       env:
@@ -54,7 +54,7 @@ spec:
         fi
 
     - name: apply-additional-tags-from-image-label
-      image: registry.access.redhat.com/ubi9/skopeo:9.5-1734513455@sha256:ed14fc6a175289cc72ffb122ebc02db0e7f448a2ed6169472347aaeb0c12c373
+      image: registry.access.redhat.com/ubi9/skopeo:9.5-1736426934@sha256:95f1267a84f36b47d3103b8ff57ec8555d1e95f0fa269a902b5652bf0fd2dc69
       env:
       - name: IMAGE
         value: $(params.IMAGE)
diff --git a/task/build-image-index/0.1/build-image-index.yaml b/task/build-image-index/0.1/build-image-index.yaml
index 0752d14222..c1cef517db 100644
--- a/task/build-image-index/0.1/build-image-index.yaml
+++ b/task/build-image-index/0.1/build-image-index.yaml
@@ -163,7 +163,7 @@ spec:
         add:
           - SETFCAP
 
-  - image: quay.io/konflux-ci/sbom-utility-scripts@sha256:8f6e3348367e5dd418f49e4394afec92c9d7ff7cf3d333ba96ccba3f07eede0b
+  - image: quay.io/konflux-ci/sbom-utility-scripts@sha256:047c54dcca3151f9d5c19c151872c5076877f496da7b2004b19458051d2ab0a6
     name: create-sbom
     computeResources:
       limits:
diff --git a/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml
index 174a3915c8..c4b1558401 100644
--- a/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml
+++ b/task/buildah-oci-ta/0.1/buildah-oci-ta.yaml
@@ -427,7 +427,7 @@ spec:
           add:
             - SETFCAP
     - name: sbom-syft-generate
-      image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+      image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
       workingDir: /var/workdir/source
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -456,7 +456,7 @@ spec:
       securityContext:
         runAsUser: 0
     - name: merge-syft-sboms
-      image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+      image: registry.access.redhat.com/ubi9/python-39:9.5-1736743782@sha256:36ae15329ade62cc7082d44db67f94494bf3836edb8b7cf733f7519168a6e9de
       workingDir: /var/workdir
       script: |
         #!/bin/python3
@@ -503,7 +503,7 @@ spec:
       securityContext:
         runAsUser: 0
     - name: create-purl-sbom
-      image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+      image: registry.access.redhat.com/ubi9/python-39:9.5-1736743782@sha256:36ae15329ade62cc7082d44db67f94494bf3836edb8b7cf733f7519168a6e9de
       workingDir: /var/workdir
       script: |
         #!/bin/python3
diff --git a/task/buildah-oci-ta/0.2/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.2/buildah-oci-ta.yaml
index eea114bd5f..2ac7dca3a5 100644
--- a/task/buildah-oci-ta/0.2/buildah-oci-ta.yaml
+++ b/task/buildah-oci-ta/0.2/buildah-oci-ta.yaml
@@ -575,7 +575,7 @@ spec:
           add:
             - SETFCAP
     - name: icm
-      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
       workingDir: /var/workdir
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -643,7 +643,7 @@ spec:
             - SETFCAP
         runAsUser: 0
     - name: sbom-syft-generate
-      image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+      image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
       workingDir: /var/workdir/source
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -683,7 +683,7 @@ spec:
       securityContext:
         runAsUser: 0
     - name: prepare-sboms
-      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:8f6e3348367e5dd418f49e4394afec92c9d7ff7cf3d333ba96ccba3f07eede0b
+      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:047c54dcca3151f9d5c19c151872c5076877f496da7b2004b19458051d2ab0a6
       workingDir: /var/workdir
       script: |
         if [ "${SKIP_SBOM_GENERATION}" = "true" ]; then
diff --git a/task/buildah-oci-ta/0.3/buildah-oci-ta.yaml b/task/buildah-oci-ta/0.3/buildah-oci-ta.yaml
index fd2627eb0c..c8f6779cc3 100644
--- a/task/buildah-oci-ta/0.3/buildah-oci-ta.yaml
+++ b/task/buildah-oci-ta/0.3/buildah-oci-ta.yaml
@@ -563,7 +563,7 @@ spec:
           add:
             - SETFCAP
     - name: icm
-      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+      image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
       workingDir: /var/workdir
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -631,7 +631,7 @@ spec:
             - SETFCAP
         runAsUser: 0
     - name: sbom-syft-generate
-      image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+      image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
       workingDir: /var/workdir/source
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -648,7 +648,7 @@ spec:
         echo "Running syft on the image filesystem"
         syft dir:"$(cat /shared/container_path)" --output cyclonedx-json="/var/workdir/sbom-image.json"
     - name: prepare-sboms
-      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:8f6e3348367e5dd418f49e4394afec92c9d7ff7cf3d333ba96ccba3f07eede0b
+      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:047c54dcca3151f9d5c19c151872c5076877f496da7b2004b19458051d2ab0a6
       workingDir: /var/workdir
       script: |
         if [ "${SKIP_SBOM_GENERATION}" = "true" ]; then
diff --git a/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml
index b47ade17e7..2f75d06539 100644
--- a/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml
+++ b/task/buildah-remote-oci-ta/0.1/buildah-remote-oci-ta.yaml
@@ -523,7 +523,7 @@ spec:
       readOnly: true
     workingDir: /var/workdir
   - computeResources: {}
-    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
     name: sbom-syft-generate
     script: |
       echo "Running syft on the source directory"
@@ -554,7 +554,7 @@ spec:
     - mountPath: /shared
       name: shared
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736743782@sha256:36ae15329ade62cc7082d44db67f94494bf3836edb8b7cf733f7519168a6e9de
     name: merge-syft-sboms
     script: |
       #!/bin/python3
@@ -603,7 +603,7 @@ spec:
       runAsUser: 0
     workingDir: /var/workdir
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736743782@sha256:36ae15329ade62cc7082d44db67f94494bf3836edb8b7cf733f7519168a6e9de
     name: create-purl-sbom
     script: |
       #!/bin/python3
diff --git a/task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml
index 86c6544a1b..bd5606d44a 100644
--- a/task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml
+++ b/task/buildah-remote-oci-ta/0.2/buildah-remote-oci-ta.yaml
@@ -683,7 +683,7 @@ spec:
       readOnly: true
     workingDir: /var/workdir
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -761,7 +761,7 @@ spec:
       readOnly: true
     workingDir: /var/workdir
   - computeResources: {}
-    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
     name: sbom-syft-generate
     script: |
       #!/bin/bash
@@ -820,7 +820,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:8f6e3348367e5dd418f49e4394afec92c9d7ff7cf3d333ba96ccba3f07eede0b
+    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:047c54dcca3151f9d5c19c151872c5076877f496da7b2004b19458051d2ab0a6
     name: prepare-sboms
     script: |
       #!/bin/bash
diff --git a/task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml b/task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml
index 7dc428284c..2ee4687a5f 100644
--- a/task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml
+++ b/task/buildah-remote-oci-ta/0.3/buildah-remote-oci-ta.yaml
@@ -671,7 +671,7 @@ spec:
       readOnly: true
     workingDir: /var/workdir
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -749,7 +749,7 @@ spec:
       readOnly: true
     workingDir: /var/workdir
   - computeResources: {}
-    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
     name: sbom-syft-generate
     script: |
       #!/bin/bash
@@ -779,7 +779,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:8f6e3348367e5dd418f49e4394afec92c9d7ff7cf3d333ba96ccba3f07eede0b
+    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:047c54dcca3151f9d5c19c151872c5076877f496da7b2004b19458051d2ab0a6
     name: prepare-sboms
     script: |
       #!/bin/bash
diff --git a/task/buildah-remote/0.1/buildah-remote.yaml b/task/buildah-remote/0.1/buildah-remote.yaml
index 8d12e7f080..5f0551e270 100644
--- a/task/buildah-remote/0.1/buildah-remote.yaml
+++ b/task/buildah-remote/0.1/buildah-remote.yaml
@@ -516,7 +516,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
     name: sbom-syft-generate
     script: |
       echo "Running syft on the source directory"
@@ -547,7 +547,7 @@ spec:
     - mountPath: /shared
       name: shared
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736743782@sha256:36ae15329ade62cc7082d44db67f94494bf3836edb8b7cf733f7519168a6e9de
     name: merge-syft-sboms
     script: |
       #!/bin/python3
@@ -596,7 +596,7 @@ spec:
       runAsUser: 0
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736743782@sha256:36ae15329ade62cc7082d44db67f94494bf3836edb8b7cf733f7519168a6e9de
     name: create-purl-sbom
     script: |
       #!/bin/python3
diff --git a/task/buildah-remote/0.2/buildah-remote.yaml b/task/buildah-remote/0.2/buildah-remote.yaml
index 22627bef47..802607081c 100644
--- a/task/buildah-remote/0.2/buildah-remote.yaml
+++ b/task/buildah-remote/0.2/buildah-remote.yaml
@@ -659,7 +659,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -739,7 +739,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
     name: sbom-syft-generate
     script: |
       #!/bin/bash
@@ -798,7 +798,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:8f6e3348367e5dd418f49e4394afec92c9d7ff7cf3d333ba96ccba3f07eede0b
+    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:047c54dcca3151f9d5c19c151872c5076877f496da7b2004b19458051d2ab0a6
     name: prepare-sboms
     script: |
       #!/bin/bash
diff --git a/task/buildah-remote/0.3/buildah-remote.yaml b/task/buildah-remote/0.3/buildah-remote.yaml
index 71efef963a..1ba4a75c97 100644
--- a/task/buildah-remote/0.3/buildah-remote.yaml
+++ b/task/buildah-remote/0.3/buildah-remote.yaml
@@ -647,7 +647,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     name: icm
     script: |
       #!/bin/bash
@@ -727,7 +727,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
     name: sbom-syft-generate
     script: |
       #!/bin/bash
@@ -757,7 +757,7 @@ spec:
       requests:
         cpu: 100m
         memory: 256Mi
-    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:8f6e3348367e5dd418f49e4394afec92c9d7ff7cf3d333ba96ccba3f07eede0b
+    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:047c54dcca3151f9d5c19c151872c5076877f496da7b2004b19458051d2ab0a6
     name: prepare-sboms
     script: |
       #!/bin/bash
diff --git a/task/buildah-rhtap/0.1/buildah-rhtap.yaml b/task/buildah-rhtap/0.1/buildah-rhtap.yaml
index 7ebb8f4afe..7b4ce2c180 100644
--- a/task/buildah-rhtap/0.1/buildah-rhtap.yaml
+++ b/task/buildah-rhtap/0.1/buildah-rhtap.yaml
@@ -144,7 +144,7 @@ spec:
       name: tmpfiles
 
   - name: merge-sboms
-    image: registry.access.redhat.com/ubi8/python-311@sha256:e61de96a78dc883686a8b6f5ce27e00342801947cad48207ea7cf9cf06da1f1e
+    image: registry.access.redhat.com/ubi8/python-311@sha256:9c6d96570b83df08c21f6af24d49b91677cf70a877afd447c52ee54819d9679e
     env:
       - name: RESULT_PATH
         value: $(results.SBOM_BLOB_URL.path)
diff --git a/task/buildah/0.1/buildah.yaml b/task/buildah/0.1/buildah.yaml
index a9fe35d41f..e80f32746c 100644
--- a/task/buildah/0.1/buildah.yaml
+++ b/task/buildah/0.1/buildah.yaml
@@ -383,7 +383,7 @@ spec:
     workingDir: $(workspaces.source.path)
 
   - name: sbom-syft-generate
-    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
     # Respect Syft configuration if the user has it in the root of their repository
     # (need to set the workdir, see https://github.com/anchore/syft/issues/2465)
     workingDir: $(workspaces.source.path)/source
@@ -415,7 +415,7 @@ spec:
       runAsUser: 0
 
   - name: merge-syft-sboms
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736743782@sha256:36ae15329ade62cc7082d44db67f94494bf3836edb8b7cf733f7519168a6e9de
     script: |
       #!/bin/python3
       import json
@@ -464,7 +464,7 @@ spec:
       runAsUser: 0
 
   - name: create-purl-sbom
-    image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+    image: registry.access.redhat.com/ubi9/python-39:9.5-1736743782@sha256:36ae15329ade62cc7082d44db67f94494bf3836edb8b7cf733f7519168a6e9de
     script: |
       #!/bin/python3
       import json
diff --git a/task/buildah/0.2/buildah.yaml b/task/buildah/0.2/buildah.yaml
index 1849fd257e..3479ec3572 100644
--- a/task/buildah/0.2/buildah.yaml
+++ b/task/buildah/0.2/buildah.yaml
@@ -512,7 +512,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - name: icm
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     securityContext:
       capabilities:
         add:
@@ -584,7 +584,7 @@ spec:
     workingDir: $(workspaces.source.path)
 
   - name: sbom-syft-generate
-    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
     # Respect Syft configuration if the user has it in the root of their repository
     # (need to set the workdir, see https://github.com/anchore/syft/issues/2465)
     workingDir: $(workspaces.source.path)/source
@@ -627,7 +627,7 @@ spec:
       runAsUser: 0
 
   - name: prepare-sboms
-    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:8f6e3348367e5dd418f49e4394afec92c9d7ff7cf3d333ba96ccba3f07eede0b
+    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:047c54dcca3151f9d5c19c151872c5076877f496da7b2004b19458051d2ab0a6
     computeResources:
       limits:
         memory: 512Mi
diff --git a/task/buildah/0.3/buildah.yaml b/task/buildah/0.3/buildah.yaml
index 065bd1b956..7665777f77 100644
--- a/task/buildah/0.3/buildah.yaml
+++ b/task/buildah/0.3/buildah.yaml
@@ -501,7 +501,7 @@ spec:
       readOnly: true
     workingDir: $(workspaces.source.path)
   - name: icm
-    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:462980e94ba689b5f56c3d5dfb3358cd8c685300daf65a71532f11898935e7f1
+    image: quay.io/konflux-ci/icm-injection-scripts:latest@sha256:8ad969937c1889a77d56ea465e2762fe19f696f3a2e77716b7bc73b4aa9a1a65
     securityContext:
       capabilities:
         add:
@@ -573,7 +573,7 @@ spec:
     workingDir: $(workspaces.source.path)
 
   - name: sbom-syft-generate
-    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
+    image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.18.1@sha256:398f0ef395de137f05563d8de43e508bcb2e6810aa9d9adc638154b52c1a469c
     # Respect Syft configuration if the user has it in the root of their repository
     # (need to set the workdir, see https://github.com/anchore/syft/issues/2465)
     workingDir: $(workspaces.source.path)/source
@@ -593,7 +593,7 @@ spec:
       name: shared
 
   - name: prepare-sboms
-    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:8f6e3348367e5dd418f49e4394afec92c9d7ff7cf3d333ba96ccba3f07eede0b
+    image: quay.io/konflux-ci/sbom-utility-scripts@sha256:047c54dcca3151f9d5c19c151872c5076877f496da7b2004b19458051d2ab0a6
     computeResources:
       limits:
         memory: 512Mi
diff --git a/task/generate-labels/0.1/generate-labels.yaml b/task/generate-labels/0.1/generate-labels.yaml
index 00ba7e2749..75b2b19b51 100644
--- a/task/generate-labels/0.1/generate-labels.yaml
+++ b/task/generate-labels/0.1/generate-labels.yaml
@@ -38,7 +38,7 @@ spec:
       type: array
   steps:
     - name: render
-      image: quay.io/konflux-ci/yq:latest@sha256:99fb3254efcfd6a96977bcda12b4b74b872831f524e02938f9fa0d4ae797ffe2
+      image: quay.io/konflux-ci/yq:latest@sha256:4ea9ee652a035c341d00424ff6ebaf757f4b9391e016d3fdb542981bf0f537ef
       env:
       - name: SOURCE_DATE_EPOCH
         value: "$(params.source-date-epoch)"
diff --git a/task/init/0.2/init.yaml b/task/init/0.2/init.yaml
index 3d6f229234..c2ebaf94b8 100644
--- a/task/init/0.2/init.yaml
+++ b/task/init/0.2/init.yaml
@@ -25,7 +25,7 @@ spec:
 
   steps:
     - name: init
-      image: registry.access.redhat.com/ubi9/skopeo:9.5-1734513455@sha256:ed14fc6a175289cc72ffb122ebc02db0e7f448a2ed6169472347aaeb0c12c373
+      image: registry.access.redhat.com/ubi9/skopeo:9.5-1736426934@sha256:95f1267a84f36b47d3103b8ff57ec8555d1e95f0fa269a902b5652bf0fd2dc69
       env:
         - name: IMAGE_URL
           value: $(params.image-url)
diff --git a/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml b/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml
index 987a248540..1a52de7649 100644
--- a/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml
+++ b/task/prefetch-dependencies-oci-ta/0.1/prefetch-dependencies-oci-ta.yaml
@@ -128,7 +128,7 @@ spec:
         name: workdir
   steps:
     - name: skip-ta
-      image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1734497536@sha256:94b434a29a894129301f6ff52dbddb19422fc800a109170c634b056da8cd704f
+      image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1736404155@sha256:e408de45e95eed0539fe821d31aa4288fe430d94f09a24c13c567bf99044dace
       env:
         - name: INPUT
           value: $(params.input)
@@ -149,7 +149,7 @@ spec:
         - use
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
     - name: sanitize-cachi2-config-file-with-yq
-      image: quay.io/konflux-ci/yq:latest@sha256:99fb3254efcfd6a96977bcda12b4b74b872831f524e02938f9fa0d4ae797ffe2
+      image: quay.io/konflux-ci/yq:latest@sha256:4ea9ee652a035c341d00424ff6ebaf757f4b9391e016d3fdb542981bf0f537ef
       script: |
         if [ -n "${CONFIG_FILE_CONTENT}" ]; then
           # we need to drop 'goproxy_url' for safety reasons until cachi2 decides what the SBOM
diff --git a/task/prefetch-dependencies-oci-ta/0.1/recipe.yaml b/task/prefetch-dependencies-oci-ta/0.1/recipe.yaml
index 8714e08708..b0c8c0e0b2 100644
--- a/task/prefetch-dependencies-oci-ta/0.1/recipe.yaml
+++ b/task/prefetch-dependencies-oci-ta/0.1/recipe.yaml
@@ -7,7 +7,7 @@ add:
 additionalSteps:
   - at: 0
     name: skip-ta
-    image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1734497536@sha256:94b434a29a894129301f6ff52dbddb19422fc800a109170c634b056da8cd704f
+    image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1736404155@sha256:e408de45e95eed0539fe821d31aa4288fe430d94f09a24c13c567bf99044dace
     env:
     - name: INPUT
       value: $(params.input)
diff --git a/task/prefetch-dependencies/0.1/prefetch-dependencies.yaml b/task/prefetch-dependencies/0.1/prefetch-dependencies.yaml
index 7d07331978..c38345cf59 100644
--- a/task/prefetch-dependencies/0.1/prefetch-dependencies.yaml
+++ b/task/prefetch-dependencies/0.1/prefetch-dependencies.yaml
@@ -69,7 +69,7 @@ spec:
         name: shared
   steps:
   - name: sanitize-cachi2-config-file-with-yq
-    image: quay.io/konflux-ci/yq:latest@sha256:99fb3254efcfd6a96977bcda12b4b74b872831f524e02938f9fa0d4ae797ffe2
+    image: quay.io/konflux-ci/yq:latest@sha256:4ea9ee652a035c341d00424ff6ebaf757f4b9391e016d3fdb542981bf0f537ef
     script: |
       if [ -n "${CONFIG_FILE_CONTENT}" ]
       then
diff --git a/task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml b/task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml
index dc1408b4ca..90bd9b903c 100644
--- a/task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml
+++ b/task/push-dockerfile-oci-ta/0.1/push-dockerfile-oci-ta.yaml
@@ -58,7 +58,7 @@ spec:
         - use
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
     - name: push
-      image: quay.io/konflux-ci/oras:latest@sha256:d164490b5cbd38dcd819898cd3f5b73b64d2e3334cb2ddc728f49945207e2706
+      image: quay.io/konflux-ci/oras:latest@sha256:b118bceefe8110d1965742ef4818fb51d2da4493c40ad99107a09b30f5c353f8
       workingDir: /var/workdir
       env:
         - name: IMAGE
diff --git a/task/push-dockerfile/0.1/push-dockerfile.yaml b/task/push-dockerfile/0.1/push-dockerfile.yaml
index 142c32ca14..407e6a1763 100644
--- a/task/push-dockerfile/0.1/push-dockerfile.yaml
+++ b/task/push-dockerfile/0.1/push-dockerfile.yaml
@@ -39,7 +39,7 @@ spec:
     description: Digest-pinned image reference to the Dockerfile image.
   steps:
   - name: push
-    image: quay.io/konflux-ci/oras:latest@sha256:d164490b5cbd38dcd819898cd3f5b73b64d2e3334cb2ddc728f49945207e2706
+    image: quay.io/konflux-ci/oras:latest@sha256:b118bceefe8110d1965742ef4818fb51d2da4493c40ad99107a09b30f5c353f8
     workingDir: $(workspaces.workspace.path)
     env:
     - name: IMAGE
diff --git a/task/source-build-oci-ta/0.1/source-build-oci-ta.yaml b/task/source-build-oci-ta/0.1/source-build-oci-ta.yaml
index 36a95dfa8d..d147c47a24 100644
--- a/task/source-build-oci-ta/0.1/source-build-oci-ta.yaml
+++ b/task/source-build-oci-ta/0.1/source-build-oci-ta.yaml
@@ -114,7 +114,7 @@ spec:
             | .name + "@" + $matched.digest
         ' <<<"$sbom" | tee "$BASE_IMAGES_FILE"
     - name: build
-      image: quay.io/konflux-ci/source-container-build:latest@sha256:4002c18472e33b5f3d2b92e7897b0b31e4181dd5f8b8a3c4097937035e899ba3
+      image: quay.io/konflux-ci/source-container-build:latest@sha256:b4757a757be5e27e830f6c79062d6f4b37d0c3ad0deae3dba506f9287d1219d0
       workingDir: /var/workdir
       env:
         - name: SOURCE_DIR
diff --git a/task/source-build/0.1/source-build.yaml b/task/source-build/0.1/source-build.yaml
index 4191b4fc63..1f42aa45a3 100644
--- a/task/source-build/0.1/source-build.yaml
+++ b/task/source-build/0.1/source-build.yaml
@@ -102,7 +102,7 @@ spec:
         ' <<< "$sbom" | tee "$BASE_IMAGES_FILE"
 
     - name: build
-      image: quay.io/konflux-ci/source-container-build:latest@sha256:4002c18472e33b5f3d2b92e7897b0b31e4181dd5f8b8a3c4097937035e899ba3
+      image: quay.io/konflux-ci/source-container-build:latest@sha256:b4757a757be5e27e830f6c79062d6f4b37d0c3ad0deae3dba506f9287d1219d0
       # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
       # the cluster will set imagePullPolicy to IfNotPresent
       computeResources:
diff --git a/task/summary/0.1/summary.yaml b/task/summary/0.1/summary.yaml
index d57c06e893..06fb3c753d 100644
--- a/task/summary/0.1/summary.yaml
+++ b/task/summary/0.1/summary.yaml
@@ -23,7 +23,7 @@ spec:
       default: Succeeded
   steps:
     - name: appstudio-summary
-      image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1734497536@sha256:94b434a29a894129301f6ff52dbddb19422fc800a109170c634b056da8cd704f
+      image: registry.access.redhat.com/ubi9/ubi-minimal:9.5-1736404155@sha256:e408de45e95eed0539fe821d31aa4288fe430d94f09a24c13c567bf99044dace
       # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
       # the cluster will set imagePullPolicy to IfNotPresent
       env:
diff --git a/task/update-infra-deployments/0.1/update-infra-deployments.yaml b/task/update-infra-deployments/0.1/update-infra-deployments.yaml
index 8ee406f46a..361ebefed8 100644
--- a/task/update-infra-deployments/0.1/update-infra-deployments.yaml
+++ b/task/update-infra-deployments/0.1/update-infra-deployments.yaml
@@ -109,7 +109,7 @@ spec:
 
       # Based on https://github.com/tektoncd/catalog/tree/main/task/github-app-token/0.2/
     - name: create-mr
-      image: registry.access.redhat.com/ubi9/python-39:9.5-1734610342@sha256:dde5068ba8fd81eef41a9128ddad2b99e2e02e5869ffe925c605b609a0ad7bbb
+      image: registry.access.redhat.com/ubi9/python-39:9.5-1736743782@sha256:36ae15329ade62cc7082d44db67f94494bf3836edb8b7cf733f7519168a6e9de
       # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
       # the cluster will set imagePullPolicy to IfNotPresent
       volumeMounts: