diff --git a/.drone.yml b/.drone.yml
index 1fe12a9..8114677 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -10,7 +10,7 @@ platform:
 steps:
 - name: build
   pull: always
-  image: rancher/hardened-build-base:v1.22.2b1
+  image: rancher/hardened-build-base:v1.22.3b1
   commands:
   - make DRONE_TAG=${DRONE_TAG}
   volumes:
@@ -24,7 +24,7 @@ steps:
       - refs/pull/**
 
 - name: publish
-  image: rancher/hardened-build-base:v1.22.2b1
+  image: rancher/hardened-build-base:v1.22.3b1
   commands:
   - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
   - make DRONE_TAG=${DRONE_TAG} image-push
@@ -41,7 +41,7 @@ steps:
     - tag
 
 - name: scan
-  image: rancher/hardened-build-base:v1.22.2b1
+  image: rancher/hardened-build-base:v1.22.3b1
   commands:
   - make DRONE_TAG=${DRONE_TAG} image-scan
   volumes:
@@ -70,7 +70,7 @@ platform:
 steps:
 - name: build
   pull: always
-  image: rancher/hardened-build-base:v1.22.2b1
+  image: rancher/hardened-build-base:v1.22.3b1
   commands:
   - make DRONE_TAG=${DRONE_TAG}
   volumes:
@@ -84,7 +84,7 @@ steps:
       - refs/pull/**
 
 - name: publish
-  image: rancher/hardened-build-base:v1.22.2b1
+  image: rancher/hardened-build-base:v1.22.3b1
   commands:
   - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
   - make DRONE_TAG=${DRONE_TAG} image-push
@@ -101,7 +101,7 @@ steps:
     - tag
 
 - name: scan
-  image: rancher/hardened-build-base:v1.22.2b1
+  image: rancher/hardened-build-base:v1.22.3b1
   commands:
   - make DRONE_TAG=${DRONE_TAG} image-scan
   volumes:
diff --git a/Dockerfile b/Dockerfile
index 5ac5104..daa0d6a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 ARG ARCH="amd64"
 ARG BCI_IMAGE=registry.suse.com/bci/bci-base
-ARG GO_IMAGE=rancher/hardened-build-base:v1.22.2b1
+ARG GO_IMAGE=rancher/hardened-build-base:v1.22.3b1
 ARG CNI_IMAGE_VERSION=v1.4.1-build20240430
 ARG CNI_IMAGE=rancher/hardened-cni-plugins:${CNI_IMAGE_VERSION}
 ARG GOEXPERIMENT=boringcrypto