diff --git a/.github/workflows/dev_be_build_and_deploy.yml b/.github/workflows/dev_be_build_and_deploy.yml
index 9dcade393..a5f99a85b 100644
--- a/.github/workflows/dev_be_build_and_deploy.yml
+++ b/.github/workflows/dev_be_build_and_deploy.yml
@@ -47,7 +47,7 @@ jobs:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           context: ${{ github.workspace }}/${{ env.WORKING_DIR }}
           dockerfile: ${{ github.workspace }}/${{ env.WORKING_DIR }}/${{ env.BE_DOCKER_FILE }}
-          image_tags: "unstable,${{ github.sha }}"
+          image_tags: "${{ env.ENVIRONMENT }},${{ github.sha }}"
 
   deploy-data-tools:
     needs: build-data-tools
diff --git a/.github/workflows/nightly_scans.yml b/.github/workflows/nightly_scans.yml
index d3df773fc..73f147bed 100644
--- a/.github/workflows/nightly_scans.yml
+++ b/.github/workflows/nightly_scans.yml
@@ -25,7 +25,7 @@ jobs:
           target: 'https://stg.ops.opre.acf.gov/'
           allow_issue_writing: false
           fail_action: false
-          cmd_options: '-I'
+          cmd_options: '-I -l FAIL'
 
       ## Manually reviewed the action, and validated it performs basic
       ## conversion from zap.json to zap.sarif.
diff --git a/.github/workflows/prod_be_build_and_deploy.yml b/.github/workflows/prod_be_build_and_deploy.yml
index 1e31aea1a..486d0e3d4 100644
--- a/.github/workflows/prod_be_build_and_deploy.yml
+++ b/.github/workflows/prod_be_build_and_deploy.yml
@@ -42,7 +42,7 @@ jobs:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           context: ${{ github.workspace }}/${{ env.WORKING_DIR }}
           dockerfile: ${{ github.workspace }}/${{ env.WORKING_DIR }}/${{ env.BE_DOCKER_FILE }}
-          image_tags: "${{ github.sha }}"
+          image_tags: "${{ env.ENVIRONMENT }},${{ github.sha }}"
 
   deploy-data-tools:
     needs: build-data-tools
diff --git a/.github/workflows/stg_be_build_and_deploy.yml b/.github/workflows/stg_be_build_and_deploy.yml
index c4c1d38ff..e978584cf 100644
--- a/.github/workflows/stg_be_build_and_deploy.yml
+++ b/.github/workflows/stg_be_build_and_deploy.yml
@@ -47,7 +47,7 @@ jobs:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           context: ${{ github.workspace }}/${{ env.WORKING_DIR }}
           dockerfile: ${{ github.workspace }}/${{ env.WORKING_DIR }}/${{ env.BE_DOCKER_FILE }}
-          image_tags: "${{ github.sha }}"
+          image_tags: "${{ env.ENVIRONMENT }},${{ github.sha }}"
 
   deploy-data-tools:
     needs: build-data-tools
diff --git a/frontend/Dockerfile b/frontend/Dockerfile
index 816eaeb97..d1f293ef5 100644
--- a/frontend/Dockerfile
+++ b/frontend/Dockerfile
@@ -1,4 +1,4 @@
-FROM oven/bun@sha256:c69984f2e6b7860a9ab9cd5762e59a51aa3e62b5b12d109a1fcbc04857dc4f5b
+FROM oven/bun@sha256:c644717831b531f8fba049ddde9bb34f452bd75c4184f1e9a643ec4537be16de
 # hadolint ignore=DL3008
 RUN apt-get update && apt-get -y --no-install-recommends install unzip && apt-get clean && rm -rf /var/lib/apt/lists/*
 RUN useradd -ms /bin/bash app
diff --git a/frontend/Dockerfile.azure b/frontend/Dockerfile.azure
index 24927b2ea..33e9b86d8 100644
--- a/frontend/Dockerfile.azure
+++ b/frontend/Dockerfile.azure
@@ -1,6 +1,6 @@
 # ---- Build Stage ----
 # alpine
-FROM oven/bun@sha256:c69984f2e6b7860a9ab9cd5762e59a51aa3e62b5b12d109a1fcbc04857dc4f5b as build
+FROM oven/bun@sha256:c644717831b531f8fba049ddde9bb34f452bd75c4184f1e9a643ec4537be16de as build
 RUN apt-get update && apt-get -y install unzip=6.0-26+deb11u1 --no-install-recommends && apt-get clean && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /home/bun/app
diff --git a/frontend/bun.lockb b/frontend/bun.lockb
index c4aa893b7..dfad1e347 100755
Binary files a/frontend/bun.lockb and b/frontend/bun.lockb differ
diff --git a/frontend/package.json b/frontend/package.json
index 3682e7fde..0a3df27a3 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -57,7 +57,7 @@
     "vite-plugin-svgr": "4.3.0"
   },
   "overrides": {
-    "rollup": "4.29.1"
+    "rollup": "4.30.0"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "6.6.3",