diff --git a/.tekton/tasks/ec-checks.yaml b/.tekton/tasks/ec-checks.yaml
index 16b177b5bf..5b7aa97bc0 100644
--- a/.tekton/tasks/ec-checks.yaml
+++ b/.tekton/tasks/ec-checks.yaml
@@ -37,7 +37,7 @@ spec:
       stepactions_dir stepactions-ec
   - name: validate-all-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:47e326ef3248e0574c7e5388a799510dac014da66dee9ab23d957b396043467b
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:57e14c2ae9591a5bb1e2638ed4c657876ad1889016e8a1a430fd59cb3735da38
     script: |
       set -euo pipefail
 
@@ -51,7 +51,7 @@ spec:
       ec validate input --policy "${policy}" --output yaml --strict=true ${args[*]}
   - name: validate-build-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:47e326ef3248e0574c7e5388a799510dac014da66dee9ab23d957b396043467b
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:57e14c2ae9591a5bb1e2638ed4c657876ad1889016e8a1a430fd59cb3735da38
     script: |
       set -euo pipefail
 
@@ -65,7 +65,7 @@ spec:
       ec validate input --policy "${policy}" --output yaml --strict=true ${args[*]}
   - name: validate-step-actions
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:47e326ef3248e0574c7e5388a799510dac014da66dee9ab23d957b396043467b
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:57e14c2ae9591a5bb1e2638ed4c657876ad1889016e8a1a430fd59cb3735da38
     script: |
       #!/bin/bash
       set -euo pipefail
diff --git a/pipelines/enterprise-contract.yaml b/pipelines/enterprise-contract.yaml
index fc8b59ccaf..f3deddfdde 100644
--- a/pipelines/enterprise-contract.yaml
+++ b/pipelines/enterprise-contract.yaml
@@ -114,7 +114,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:d6a784046fada0d061a731e704333e07261fc4035f7186718153eb0c1880765c
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:3a77cc4a82e45bc9ddbbef622c5d272c1d3ec91c9e1452a739dd94e1d6418974
           - name: name
             value: verify-enterprise-contract
           - name: kind
diff --git a/task/tkn-bundle-oci-ta/0.1/tkn-bundle-oci-ta.yaml b/task/tkn-bundle-oci-ta/0.1/tkn-bundle-oci-ta.yaml
index 4e09d4c397..8da707143d 100644
--- a/task/tkn-bundle-oci-ta/0.1/tkn-bundle-oci-ta.yaml
+++ b/task/tkn-bundle-oci-ta/0.1/tkn-bundle-oci-ta.yaml
@@ -54,12 +54,12 @@ spec:
         name: workdir
   steps:
     - name: use-trusted-artifact
-      image: quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:52f1391e6f1c472fd10bb838f64fae2ed3320c636f536014978a5ddbdfc6b3af
+      image: quay.io/redhat-appstudio/build-trusted-artifacts:latest@sha256:ff35e09ff5c89e54538b50abae241a765b2b7868f05d62c4835bebf0978f3659
       args:
         - use
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
     - name: modify-task-files
-      image: quay.io/konflux-ci/konflux-test:latest@sha256:2224fabdb0a28a415d4af4c58ae53d7c4c53c83c315f12e07d1d7f48a80bfa70
+      image: quay.io/konflux-ci/konflux-test:latest@sha256:d596724343a31c201a5c2e79f233f9ef78ac65726ae4ed5ffa41d76b3dac630f
       workingDir: /var/workdir/source
       env:
         - name: CONTEXT
@@ -130,7 +130,7 @@ spec:
 
         printf "%s\n" "${FILES[@]}" >"${TASK_FILE}"
     - name: build
-      image: registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel8:v1.13.1@sha256:575faccd21c06a4f33e39382b9dc17681c60b41ef0e124d2980b75c39909c36a
+      image: registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel8:v1.17.1@sha256:bf9071d0e144632a0acd90ddb4d2e1ecd435e1904e22233a1e1978cbe3a0206b
       workingDir: /var/workdir/source
       env:
         - name: CONTEXT
diff --git a/task/tkn-bundle/0.1/tkn-bundle.yaml b/task/tkn-bundle/0.1/tkn-bundle.yaml
index 87de56918c..69b9168e8c 100644
--- a/task/tkn-bundle/0.1/tkn-bundle.yaml
+++ b/task/tkn-bundle/0.1/tkn-bundle.yaml
@@ -41,7 +41,7 @@ spec:
     - name: TASK_FILE
       value: tekton_task_files
   steps:
-  - image: quay.io/konflux-ci/konflux-test:latest@sha256:2224fabdb0a28a415d4af4c58ae53d7c4c53c83c315f12e07d1d7f48a80bfa70
+  - image: quay.io/konflux-ci/konflux-test:latest@sha256:d596724343a31c201a5c2e79f233f9ef78ac65726ae4ed5ffa41d76b3dac630f
     name: modify-task-files
     env:
     - name: CONTEXT
@@ -112,7 +112,7 @@ spec:
 
       printf "%s\n" "${FILES[@]}" > "${TASK_FILE}"
     workingDir: $(workspaces.source.path)
-  - image: registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel8:v1.13.1@sha256:575faccd21c06a4f33e39382b9dc17681c60b41ef0e124d2980b75c39909c36a
+  - image: registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel8:v1.17.1@sha256:bf9071d0e144632a0acd90ddb4d2e1ecd435e1904e22233a1e1978cbe3a0206b
     name: build
     env:
     - name: CONTEXT
diff --git a/task/verify-enterprise-contract/0.1/verify-enterprise-contract.yaml b/task/verify-enterprise-contract/0.1/verify-enterprise-contract.yaml
index e2d2c004f0..f9810cb83f 100644
--- a/task/verify-enterprise-contract/0.1/verify-enterprise-contract.yaml
+++ b/task/verify-enterprise-contract/0.1/verify-enterprise-contract.yaml
@@ -111,12 +111,12 @@ spec:
 
   steps:
     - name: version
-      image: registry.redhat.io/rhtas/ec-rhel9:0.2
+      image: registry.redhat.io/rhtas/ec-rhel9:0.5
       command: [ec]
       args:
         - version
     - name: initialize-tuf
-      image: registry.redhat.io/rhtas/ec-rhel9:0.2
+      image: registry.redhat.io/rhtas/ec-rhel9:0.5
       script: |-
         set -euo pipefail
 
@@ -132,7 +132,7 @@ spec:
         - name: TUF_MIRROR
           value: "$(params.TUF_MIRROR)"
     - name: validate
-      image: registry.redhat.io/rhtas/ec-rhel9:0.2
+      image: registry.redhat.io/rhtas/ec-rhel9:0.5
       command: [ec]
       args:
         - validate
@@ -180,23 +180,23 @@ spec:
         limits:
           memory: 2Gi
     - name: report
-      image: registry.redhat.io/rhtas/ec-rhel9:0.2
+      image: registry.redhat.io/rhtas/ec-rhel9:0.5
       command: [cat]
       args:
         - "$(params.HOMEDIR)/report.yaml"
     - name: report-json
-      image: registry.redhat.io/rhtas/ec-rhel9:0.2
+      image: registry.redhat.io/rhtas/ec-rhel9:0.5
       command: [cat]
       args:
         - "$(params.HOMEDIR)/report-json.json"
     - name: summary
-      image: registry.redhat.io/rhtas/ec-rhel9:0.2
+      image: registry.redhat.io/rhtas/ec-rhel9:0.5
       command: [jq]
       args:
         - "."
         - "$(results.TEST_OUTPUT.path)"
     - name: assert
-      image: registry.redhat.io/rhtas/ec-rhel9:0.2
+      image: registry.redhat.io/rhtas/ec-rhel9:0.5
       command: [jq]
       args:
         - "--argjson"