diff --git a/Dockerfile b/Dockerfile
index d22f0ed7..efb442c1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,7 +6,7 @@
 #  needs CA certificates, which distroless provides, and no shell or package manager.
 #  The base is not pinned to the build platform: nothing runs at build time anymore, and
 #  pinning it gave the arm64 image an amd64 base.
-FROM gcr.io/distroless/static-debian13:latest@sha256:58133991db06659feaabe0f4e97a35cebf15ef4ea08f8a4c6d2ee5f75e4aa6a0
+FROM gcr.io/distroless/static-debian13:latest@sha256:15f8637509792e05b97d83451b0b6ccfa4abd548f997e406ac1e72c87fe1fa78
 
 LABEL maintainer="Olivier Vernin <me@olblak.com>"