diff --git a/docker/base.Dockerfile b/docker/base.Dockerfile
index d0d9ea25..2832f8ef 100644
--- a/docker/base.Dockerfile
+++ b/docker/base.Dockerfile
@@ -23,7 +23,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=$TARGETARCH go build -a -o ${MAIN_ENTRY}  ./
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM gcr.io/distroless/static:nonroot@sha256:6cd937e9155bdfd805d1b94e037f9d6a899603306030936a3b11680af0c2ed58
+FROM gcr.io/distroless/static:nonroot@sha256:6ec5aa99dc335666e79dc64e4a6c8b89c33a543a1967f20d360922a80dd21f02
 ARG MAIN_ENTRY
 WORKDIR /
 COPY --from=base /workspace/${MAIN_ENTRY} .
diff --git a/docker/cnimanager.Dockerfile b/docker/cnimanager.Dockerfile
index 9173cc81..854edbf9 100644
--- a/docker/cnimanager.Dockerfile
+++ b/docker/cnimanager.Dockerfile
@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1
-FROM gcr.io/distroless/static:latest@sha256:5c7e2b465ac6a2a4e5f4f7f722ce43b147dabe87cb21ac6c4007ae5178a1fa58
+FROM gcr.io/distroless/static:latest@sha256:3f2b64ef97bd285e36132c684e6b2ae8f2723293d09aae046196cca64251acac
 ARG MAIN_ENTRY
 COPY --from=baseimg /${MAIN_ENTRY} /
 ENTRYPOINT ["/${MAIN_ENTRY}"]