diff --git a/.github/workflows/.ci-build.yml b/.github/workflows/.ci-build.yml
index fa6f7d3..6df8180 100644
--- a/.github/workflows/.ci-build.yml
+++ b/.github/workflows/.ci-build.yml
@@ -74,7 +74,7 @@ jobs:
     timeout-minutes: 600 # default is 360
 
     container:
-      image: ghcr.io/wolfi-dev/sdk:latest@sha256:8965572f88c0b1e9f894a323391efd4719559688a4e0a5c9e863bec4dc7e70ba
+      image: ghcr.io/wolfi-dev/sdk:latest@sha256:cb037cc95a9b1344fb71d0547d48f2f8caebb82cc01af61e74fac6bfe902516f
       options: |
         --cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
 
diff --git a/advisories-validate/action.yaml b/advisories-validate/action.yaml
index 5453dd2..8abeb22 100644
--- a/advisories-validate/action.yaml
+++ b/advisories-validate/action.yaml
@@ -37,7 +37,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: docker://ghcr.io/wolfi-dev/sdk:latest@sha256:8965572f88c0b1e9f894a323391efd4719559688a4e0a5c9e863bec4dc7e70ba
+  image: docker://ghcr.io/wolfi-dev/sdk:latest@sha256:cb037cc95a9b1344fb71d0547d48f2f8caebb82cc01af61e74fac6bfe902516f
   entrypoint: wolfictl
   args:
     - adv
diff --git a/build-and-publish-secdb/action.yaml b/build-and-publish-secdb/action.yaml
index ade1f1c..1a1a4b8 100644
--- a/build-and-publish-secdb/action.yaml
+++ b/build-and-publish-secdb/action.yaml
@@ -61,7 +61,7 @@ runs:
       shell: bash
 
     - name: Build the security database
-      uses: docker://ghcr.io/wolfi-dev/sdk:latest@sha256:8965572f88c0b1e9f894a323391efd4719559688a4e0a5c9e863bec4dc7e70ba
+      uses: docker://ghcr.io/wolfi-dev/sdk:latest@sha256:cb037cc95a9b1344fb71d0547d48f2f8caebb82cc01af61e74fac6bfe902516f
       with:
         entrypoint: wolfictl
         args: ${{ inputs.wolfictl_args }}
diff --git a/build-and-publish-yaml/action.yaml b/build-and-publish-yaml/action.yaml
index 2e20fcd..e4593cf 100644
--- a/build-and-publish-yaml/action.yaml
+++ b/build-and-publish-yaml/action.yaml
@@ -56,7 +56,7 @@ runs:
       shell: bash
 
     - name: Build the security database
-      uses: docker://ghcr.io/wolfi-dev/sdk:latest@sha256:8965572f88c0b1e9f894a323391efd4719559688a4e0a5c9e863bec4dc7e70ba
+      uses: docker://ghcr.io/wolfi-dev/sdk:latest@sha256:cb037cc95a9b1344fb71d0547d48f2f8caebb82cc01af61e74fac6bfe902516f
       with:
         entrypoint: wolfictl
         args: ${{ inputs.wolfictl_args }}
diff --git a/install-wolfictl/action.yaml b/install-wolfictl/action.yaml
index 637f311..e55fa8c 100644
--- a/install-wolfictl/action.yaml
+++ b/install-wolfictl/action.yaml
@@ -10,6 +10,6 @@ runs:
       run: |
         # Copy wolfictl out of the wolfictl image and onto PATH
         TMP=$(mktemp -d)
-        docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:8965572f88c0b1e9f894a323391efd4719559688a4e0a5c9e863bec4dc7e70ba -c "cp /usr/bin/wolfictl /out"
+        docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:cb037cc95a9b1344fb71d0547d48f2f8caebb82cc01af61e74fac6bfe902516f -c "cp /usr/bin/wolfictl /out"
         echo "$TMP" >> $GITHUB_PATH
       shell: bash