diff --git a/Dockerfile b/Dockerfile
index 8bc1ba28..32c64e90 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -76,7 +76,7 @@ RUN /syft /panvex-control-plane -o cyclonedx-json=/sbom/control-plane.cdx.json &
     test -s /sbom/control-plane.cdx.json && \
     head -c1 /sbom/control-plane.cdx.json | grep -q '{'
 
-FROM alpine:3.24@sha256:a2d49ea686c2adfe3c992e47dc3b5e7fa6e6b5055609400dc2acaeb241c829f4 AS control-plane
+FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b AS control-plane
 WORKDIR /app
 
 # OCI image labels — operator scanners look these up to attribute the