diff --git a/tekton/publish.yaml b/tekton/publish.yaml
index 80a12f94bcf..c1f5e9a5ad6 100644
--- a/tekton/publish.yaml
+++ b/tekton/publish.yaml
@@ -73,7 +73,7 @@ spec:
   steps:
 
   - name: container-registry-auth
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:75fc0188828433619841f1e57e5c1ebe366625a9b7a9424682a22db7386de3c1
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:9ade36a7e074436a1350ac083f958dc8d25ca8035062fea00e750d9de1aabb98
     script: |
       #!/bin/sh
       set -ex
@@ -92,7 +92,7 @@ spec:
       cp ${DOCKER_CONFIG} /workspace/docker-config.json
 
   - name: create-ko-yaml
-    image: cgr.dev/chainguard/go:latest-dev@sha256:880dbecf1506341cffc8fd0efc6008cce17ad6d41fe36f338b01f0bfe3f27dbc
+    image: cgr.dev/chainguard/go:latest-dev@sha256:0016ae6d201e9c62ae0646809cefb71519f62b01bb95e1ce10c756b365c05129
     script: |
       #!/bin/sh
       set -ex
@@ -130,7 +130,7 @@ spec:
       cat /workspace/.ko.yaml
 
   - name: run-ko
-    image: ghcr.io/tektoncd/plumbing/ko@sha256:139fecda39c99722593745a497d13e309da2808fa44b189c0dfd2abddddea9a5
+    image: ghcr.io/tektoncd/plumbing/ko@sha256:029871f116734727958900430d8dee45a3cdab7e57e1c87301f3ded37418c934
     env:
     - name: KO_DOCKER_REPO
       value: $(params.imageRegistry)/$(params.imageRegistryPath)
@@ -197,7 +197,7 @@ spec:
       sed -i -e 's/\(pipeline.tekton.dev\/release\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(app.kubernetes.io\/version\): "devel"/\1: "$(params.versionTag)"/g' -e 's/\(version\): "devel"/\1: "$(params.versionTag)"/g' ${OUTPUT_RELEASE_DIR}/release.notags.yaml
 
   - name: koparse
-    image: ghcr.io/tektoncd/plumbing/koparse@sha256:ab6822b8b6b308936cb3687adb8b5659f0b5b0d83c29b495362febd4bd5c2416
+    image: ghcr.io/tektoncd/plumbing/koparse@sha256:cb7ad45c8e3543fb556b1382d126674e0b6cd281d3f27d3b1cff157822a0ad8d
     script: |
       set -ex
 
@@ -231,7 +231,7 @@ spec:
         ${PRESERVE_IMPORT_PATH} > /workspace/built_images
 
   - name: tag-images
-    image: cgr.dev/chainguard/crane:latest-dev@sha256:75fc0188828433619841f1e57e5c1ebe366625a9b7a9424682a22db7386de3c1
+    image: cgr.dev/chainguard/crane:latest-dev@sha256:9ade36a7e074436a1350ac083f958dc8d25ca8035062fea00e750d9de1aabb98
     script: |
       #!/bin/sh
       set -ex