diff --git a/task/oci-copy-oci-ta/0.1/oci-copy-oci-ta.yaml b/task/oci-copy-oci-ta/0.1/oci-copy-oci-ta.yaml
index a49dbb7ff1..20d24ec206 100644
--- a/task/oci-copy-oci-ta/0.1/oci-copy-oci-ta.yaml
+++ b/task/oci-copy-oci-ta/0.1/oci-copy-oci-ta.yaml
@@ -78,7 +78,7 @@ spec:
         - use
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
     - name: prepare
-      image: quay.io/konflux-ci/yq:latest@sha256:93bb15cff64b708263055a5814b24a0b450d8724b86a7e5206396f25d81fcc21
+      image: quay.io/konflux-ci/yq:latest@sha256:b12317236f7ea11062f13e3742a489596e58b0bc6abb271d1ff2903219e8dedb
       workingDir: /var/workdir
       script: |
         #!/bin/bash
@@ -107,7 +107,7 @@ spec:
           cat "/var/workdir/vars/$filename"
         done
     - name: oci-copy
-      image: quay.io/konflux-ci/oras:latest@sha256:c68c23fe7bb1ba9fc335192761ea94fc2c9beb701f3c205890581ff62fd38d80
+      image: quay.io/konflux-ci/oras:latest@sha256:26de02f41365ffb8a7a40e357cf96ff2f1a24788fb68a2a7eaf1b4dca3f5effa
       workingDir: /var/workdir
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -301,7 +301,7 @@ spec:
           add:
             - SETFCAP
     - name: sbom-generate
-      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:1939901046f2ec0afda6d48f32dc82f991d9a4e2b4b4513635b9c79e3d4c2872
+      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:4bacb68b740789e5ba74710ea5adb7f17d9a3c5182eb6a3802ae937301bb56c8
       workingDir: /var/workdir
       script: |
         #!/bin/bash
@@ -328,7 +328,7 @@ spec:
       script: |
         cosign attach sbom --sbom sbom.json --type "$SBOM_TYPE" "$(cat "$(results.IMAGE_REF.path)")"
     - name: report-sbom-url
-      image: quay.io/konflux-ci/yq:latest@sha256:93bb15cff64b708263055a5814b24a0b450d8724b86a7e5206396f25d81fcc21
+      image: quay.io/konflux-ci/yq:latest@sha256:b12317236f7ea11062f13e3742a489596e58b0bc6abb271d1ff2903219e8dedb
       workingDir: /var/workdir
       script: |
         #!/bin/bash
diff --git a/task/oci-copy-oci-ta/0.2/oci-copy-oci-ta.yaml b/task/oci-copy-oci-ta/0.2/oci-copy-oci-ta.yaml
index c84ae8d082..5016021c34 100644
--- a/task/oci-copy-oci-ta/0.2/oci-copy-oci-ta.yaml
+++ b/task/oci-copy-oci-ta/0.2/oci-copy-oci-ta.yaml
@@ -78,7 +78,7 @@ spec:
         - use
         - $(params.SOURCE_ARTIFACT)=/var/workdir/source
     - name: prepare
-      image: quay.io/konflux-ci/yq:latest@sha256:93bb15cff64b708263055a5814b24a0b450d8724b86a7e5206396f25d81fcc21
+      image: quay.io/konflux-ci/yq:latest@sha256:b12317236f7ea11062f13e3742a489596e58b0bc6abb271d1ff2903219e8dedb
       workingDir: /var/workdir
       script: |
         #!/bin/bash
@@ -107,7 +107,7 @@ spec:
           cat "/var/workdir/vars/$filename"
         done
     - name: oci-copy
-      image: quay.io/konflux-ci/oras:latest@sha256:c68c23fe7bb1ba9fc335192761ea94fc2c9beb701f3c205890581ff62fd38d80
+      image: quay.io/konflux-ci/oras:latest@sha256:26de02f41365ffb8a7a40e357cf96ff2f1a24788fb68a2a7eaf1b4dca3f5effa
       workingDir: /var/workdir
       volumeMounts:
         - mountPath: /var/lib/containers
@@ -301,7 +301,7 @@ spec:
           add:
             - SETFCAP
     - name: sbom-generate
-      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:1939901046f2ec0afda6d48f32dc82f991d9a4e2b4b4513635b9c79e3d4c2872
+      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:4bacb68b740789e5ba74710ea5adb7f17d9a3c5182eb6a3802ae937301bb56c8
       workingDir: /var/workdir
       script: |
         #!/bin/bash
@@ -328,7 +328,7 @@ spec:
       script: |
         cosign attach sbom --sbom sbom.json --type "$SBOM_TYPE" "$(cat "$(results.IMAGE_REF.path)")"
     - name: report-sbom-url
-      image: quay.io/konflux-ci/yq:latest@sha256:93bb15cff64b708263055a5814b24a0b450d8724b86a7e5206396f25d81fcc21
+      image: quay.io/konflux-ci/yq:latest@sha256:b12317236f7ea11062f13e3742a489596e58b0bc6abb271d1ff2903219e8dedb
       workingDir: /var/workdir
       script: |
         #!/bin/bash
diff --git a/task/oci-copy/0.1/oci-copy.yaml b/task/oci-copy/0.1/oci-copy.yaml
index 22832de0aa..f8206b83c3 100644
--- a/task/oci-copy/0.1/oci-copy.yaml
+++ b/task/oci-copy/0.1/oci-copy.yaml
@@ -58,7 +58,7 @@ spec:
         value: $(params.SBOM_TYPE)
   steps:
     - name: prepare
-      image: quay.io/konflux-ci/yq:latest@sha256:93bb15cff64b708263055a5814b24a0b450d8724b86a7e5206396f25d81fcc21
+      image: quay.io/konflux-ci/yq:latest@sha256:b12317236f7ea11062f13e3742a489596e58b0bc6abb271d1ff2903219e8dedb
       script: |
         #!/bin/bash
         set -eu
@@ -87,7 +87,7 @@ spec:
         done
       workingDir: $(workspaces.source.path)
     - name: oci-copy
-      image: quay.io/konflux-ci/oras:latest@sha256:c68c23fe7bb1ba9fc335192761ea94fc2c9beb701f3c205890581ff62fd38d80
+      image: quay.io/konflux-ci/oras:latest@sha256:26de02f41365ffb8a7a40e357cf96ff2f1a24788fb68a2a7eaf1b4dca3f5effa
       computeResources:
         limits:
           memory: 1Gi
@@ -281,7 +281,7 @@ spec:
           name: varlibcontainers
       workingDir: $(workspaces.source.path)
     - name: sbom-generate
-      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:1939901046f2ec0afda6d48f32dc82f991d9a4e2b4b4513635b9c79e3d4c2872
+      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:4bacb68b740789e5ba74710ea5adb7f17d9a3c5182eb6a3802ae937301bb56c8
       script: |
         #!/bin/bash
         set -euo pipefail
@@ -308,7 +308,7 @@ spec:
       script: |
         cosign attach sbom --sbom sbom.json --type "$SBOM_TYPE" "$(cat "$(results.IMAGE_REF.path)")"
     - name: report-sbom-url
-      image: quay.io/konflux-ci/yq:latest@sha256:93bb15cff64b708263055a5814b24a0b450d8724b86a7e5206396f25d81fcc21
+      image: quay.io/konflux-ci/yq:latest@sha256:b12317236f7ea11062f13e3742a489596e58b0bc6abb271d1ff2903219e8dedb
       script: |
         #!/bin/bash
         REPO=${IMAGE%:*}
diff --git a/task/oci-copy/0.2/oci-copy.yaml b/task/oci-copy/0.2/oci-copy.yaml
index 529f8f7fbf..8410635df1 100644
--- a/task/oci-copy/0.2/oci-copy.yaml
+++ b/task/oci-copy/0.2/oci-copy.yaml
@@ -58,7 +58,7 @@ spec:
         value: $(params.SBOM_TYPE)
   steps:
     - name: prepare
-      image: quay.io/konflux-ci/yq:latest@sha256:93bb15cff64b708263055a5814b24a0b450d8724b86a7e5206396f25d81fcc21
+      image: quay.io/konflux-ci/yq:latest@sha256:b12317236f7ea11062f13e3742a489596e58b0bc6abb271d1ff2903219e8dedb
       script: |
         #!/bin/bash
         set -eu
@@ -87,7 +87,7 @@ spec:
         done
       workingDir: $(workspaces.source.path)
     - name: oci-copy
-      image: quay.io/konflux-ci/oras:latest@sha256:c68c23fe7bb1ba9fc335192761ea94fc2c9beb701f3c205890581ff62fd38d80
+      image: quay.io/konflux-ci/oras:latest@sha256:26de02f41365ffb8a7a40e357cf96ff2f1a24788fb68a2a7eaf1b4dca3f5effa
       computeResources:
         limits:
           memory: 1Gi
@@ -281,7 +281,7 @@ spec:
           name: varlibcontainers
       workingDir: $(workspaces.source.path)
     - name: sbom-generate
-      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:1939901046f2ec0afda6d48f32dc82f991d9a4e2b4b4513635b9c79e3d4c2872
+      image: quay.io/konflux-ci/sbom-utility-scripts@sha256:4bacb68b740789e5ba74710ea5adb7f17d9a3c5182eb6a3802ae937301bb56c8
       script: |
         #!/bin/bash
         set -euo pipefail
@@ -308,7 +308,7 @@ spec:
       script: |
         cosign attach sbom --sbom sbom.json --type "$SBOM_TYPE" "$(cat "$(results.IMAGE_REF.path)")"
     - name: report-sbom-url
-      image: quay.io/konflux-ci/yq:latest@sha256:93bb15cff64b708263055a5814b24a0b450d8724b86a7e5206396f25d81fcc21
+      image: quay.io/konflux-ci/yq:latest@sha256:b12317236f7ea11062f13e3742a489596e58b0bc6abb271d1ff2903219e8dedb
       script: |
         #!/bin/bash
         REPO=${IMAGE%:*}