diff --git a/src/api/resources/import-resources-pipelinerun.yaml b/src/api/resources/import-resources-pipelinerun.yaml
index 262f8311c..6ec343e77 100644
--- a/src/api/resources/import-resources-pipelinerun.yaml
+++ b/src/api/resources/import-resources-pipelinerun.yaml
@@ -57,7 +57,7 @@ spec:
             - name: repo
           steps:
             - name: clone
-              image: ghcr.io/wolfi-dev/git:alpine@sha256:2d4aaa8bedc9baa2a48cfd91f5cdc46cc559a068fd8718874f85ca6917672d51
+              image: ghcr.io/wolfi-dev/git:alpine@sha256:ed6cb45e4b412206cf6236fd3f6b2bb4cf8fae1fa28b320918b4f58533397548
               env:
                 - name: PARAM_URL
                   value: $(params.repositoryURL)
diff --git a/tekton/prerelease-checks.yaml b/tekton/prerelease-checks.yaml
index 04ed8ae5a..e10aaaa3f 100644
--- a/tekton/prerelease-checks.yaml
+++ b/tekton/prerelease-checks.yaml
@@ -31,7 +31,7 @@ spec:
       description: The workspace where the repo has been cloned
   steps:
     - name: check-git-tag
-      image: ghcr.io/wolfi-dev/git:alpine@sha256:2d4aaa8bedc9baa2a48cfd91f5cdc46cc559a068fd8718874f85ca6917672d51
+      image: ghcr.io/wolfi-dev/git:alpine@sha256:ed6cb45e4b412206cf6236fd3f6b2bb4cf8fae1fa28b320918b4f58533397548
       script: |
         echo "Checking git tag"
         # Look for the tag in the list of tags
@@ -41,7 +41,7 @@ spec:
         echo "Version $(params.versionTag) already tagged for $(params.package)"
         exit 1
     - name: check-release-file
-      image: gcr.io/google.com/cloudsdktool/cloud-sdk:503.0.0@sha256:3de00d1ff412222f53cf71e7e20c99c13ec3e8e21dc3056e2d6cedc9408afaee
+      image: gcr.io/google.com/cloudsdktool/cloud-sdk:504.0.1@sha256:e0246385c6f43e997bb49541de7c684846ee9c2baa738a68613f14cab987feb8
       script: |
         echo "Checking release file"
         # Check if the release file already exists