diff --git a/tekton/publish.yaml b/tekton/publish.yaml
index e7b0ee7196b..434531fd7a7 100644
--- a/tekton/publish.yaml
+++ b/tekton/publish.yaml
@@ -61,7 +61,7 @@ spec:
   steps:
 
   - name: container-registry-auth
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:1a927240f7540b834580bba77633bcb93012a0e6df04ba8dfb54ab00238b9821
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:7f9ff36223df1332cc9bbc5d991f76cf7e0d8d14928ffae630106f4c576e9d00
     script: |
       #!/bin/sh
       set -ex
@@ -80,7 +80,7 @@ spec:
       cp ${DOCKER_CONFIG} /workspace/docker-config.json
 
   - name: create-ko-yaml
-    image: cgr.dev/chainguard/go:latest-dev@sha256:ebeed6eb6693c533d002642984270b8ed3382233e1e4b8315ffb7f45c5c9b5c1
+    image: cgr.dev/chainguard/go:latest-dev@sha256:43ef19a7d1be0ddb4f10f4cf5ccae696eb1416109d8cf050a7ede088c3c137b6
     script: |
       #!/bin/sh
       set -ex
@@ -115,7 +115,7 @@ spec:
       cat /workspace/.ko.yaml
 
   - name: run-ko
-    image: gcr.io/tekton-releases/dogfooding/ko@sha256:b6abd5561e53f7e4171c54f293ac0f015111a2fe6361680748911a6d7db48b56
+    image: gcr.io/tekton-releases/dogfooding/ko@sha256:a0835d869b36f91a2288bd1faca51ba351def45206ad0f2696f622aa32e7a103
     env:
     - name: KO_DOCKER_REPO
       value: $(params.imageRegistry)/$(params.imageRegistryPath)
@@ -169,7 +169,7 @@ spec:
       sed -i -e 's/\(pipeline.tekton.dev\/release\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(app.kubernetes.io\/version\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(version\): "devel"/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/release.yaml
       sed -i -e 's/\(pipeline.tekton.dev\/release\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(app.kubernetes.io\/version\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(version\): "devel"/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/release.notags.yaml
   - name: koparse
-    image: gcr.io/tekton-releases/dogfooding/koparse@sha256:f4774b2666eb142b3ee258c5dd2792172f285fc23454f7a7665753375e75e18c
+    image: gcr.io/tekton-releases/dogfooding/koparse@sha256:0a11c332b06fb975dcc44d0859299bbf5bd300262518dd39a3486a33937ebe3b
     script: |
       set -ex
 
@@ -187,7 +187,7 @@ spec:
 
 
   - name: tag-images
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:1a927240f7540b834580bba77633bcb93012a0e6df04ba8dfb54ab00238b9821
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:7f9ff36223df1332cc9bbc5d991f76cf7e0d8d14928ffae630106f4c576e9d00
     script: |
       #!/bin/sh
       set -ex