diff --git a/cmd/shfmt/Dockerfile b/cmd/shfmt/Dockerfile
index 604bab48..5cd1a818 100644
--- a/cmd/shfmt/Dockerfile
+++ b/cmd/shfmt/Dockerfile
@@ -1,11 +1,11 @@
-FROM golang:1.23.0-alpine AS build
+FROM golang:1.23.2-alpine AS build
 
 WORKDIR /src
 RUN apk add --no-cache git
 COPY . .
 RUN CGO_ENABLED=0 go build -ldflags "-w -s -extldflags '-static' -X main.version=$(git describe --always --dirty --tags)" ./cmd/shfmt
 
-FROM alpine:3.19.1 AS alpine
+FROM alpine:3.20.3 AS alpine
 COPY --from=build /src/shfmt /bin/shfmt
 COPY "./cmd/shfmt/docker-entrypoint.sh" "/init"
 ENTRYPOINT ["/init"]