diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh
index 99523559ea8..e60b59f3dc3 100644
--- a/Dockerfile.cli-stack.rh
+++ b/Dockerfile.cli-stack.rh
@@ -13,10 +13,10 @@ RUN git config --global --add safe.directory /opt/app-root/src && \
     go mod vendor && \
     make -f Build.mak cross-platform
 
-FROM --platform=linux/amd64   quay.io/securesign/cli-cosign@sha256:8fd4bb8417aa96edf26b7589412f8f8cb2f79e86ba4039b802b90ccf62fb9874 AS build-amd64
-FROM --platform=linux/arm64   quay.io/securesign/cli-cosign@sha256:01c85ceb3b98aeea2cd36adfc369b3b98e209aa8caa9a83d4aef641fed209482 AS build-arm64
-FROM --platform=linux/ppc64le quay.io/securesign/cli-cosign@sha256:70914cf03ad27e419f19db9010ad997602e60f6bf4d3071ed1373ce46339d40a AS build-ppc64le
-FROM --platform=linux/s390x   quay.io/securesign/cli-cosign@sha256:17d1889f9d97058e7c26f5b2a63189f3ce4ee6e3a8acabac5b87fa7f048d8dad AS build-s390x
+FROM --platform=linux/amd64   quay.io/securesign/cli-cosign@sha256:a87ef6d074fa529844db3aa0172442a64337832b55f2cf5ab055009d9f65cfd4 AS build-amd64
+FROM --platform=linux/arm64   quay.io/securesign/cli-cosign@sha256:04e8ed98f24bfc02f414beff0a1747aeb32bb85f1a4099b31ad23395b82fe9cb AS build-arm64
+FROM --platform=linux/ppc64le quay.io/securesign/cli-cosign@sha256:e0555feec646b083a80e84543064a61d5ad6ff45c4c43d41cacd04911ba2e894 AS build-ppc64le
+FROM --platform=linux/s390x   quay.io/securesign/cli-cosign@sha256:90412d2b42942b2c31dfb2f4bcebb79c617497883c69535730bfce26944ac9e1 AS build-s390x
 
 FROM registry.redhat.io/ubi9/go-toolset:9.8-1783679445@sha256:ffc84dd3e27836987c95f9a33485c3aac784571a7ee9d13db51a690e5c27e30e AS packager
 USER root