diff --git a/.tekton/tasks/ec-checks.yaml b/.tekton/tasks/ec-checks.yaml
index 967c13b52..0f63c32a8 100644
--- a/.tekton/tasks/ec-checks.yaml
+++ b/.tekton/tasks/ec-checks.yaml
@@ -23,7 +23,7 @@ spec:
       $(all_tasks_dir all_tasks-ec)
   - name: validate-all-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:59d73df839e6af8253496108988b1213308c3a1919aa22aeaa40fb9d7b3435f7
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2ce8887b2e61c4242d6fa9fbe6babfcad1249cba9bb8230eb076c1b25170ec48
     script: |
       set -euo pipefail
 
@@ -37,7 +37,7 @@ spec:
       ec validate input --policy "${policy}" --output yaml --strict=true ${args[*]}
   - name: validate-build-tasks
     workingDir: "$(workspaces.source.path)/source"
-    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:59d73df839e6af8253496108988b1213308c3a1919aa22aeaa40fb9d7b3435f7
+    image: quay.io/enterprise-contract/ec-cli:snapshot@sha256:2ce8887b2e61c4242d6fa9fbe6babfcad1249cba9bb8230eb076c1b25170ec48
     script: |
       set -euo pipefail
 
diff --git a/pipelines/enterprise-contract.yaml b/pipelines/enterprise-contract.yaml
index f5b17a0a6..511ea747a 100644
--- a/pipelines/enterprise-contract.yaml
+++ b/pipelines/enterprise-contract.yaml
@@ -105,7 +105,7 @@ spec:
         resolver: bundles
         params:
           - name: bundle
-            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:e8674b532948899e1121b3627672b2bcd722402b58a4fda76d7c72fcf5afff8a
+            value: quay.io/enterprise-contract/ec-task-bundle:snapshot@sha256:cf6323e4c0aa7e956bf03027942f921aafab10e47685d0aedbeadd194ad71883
           - name: name
             value: verify-enterprise-contract
           - name: kind