diff --git a/.github/workflows/go-tests.yaml b/.github/workflows/go-tests.yaml
index 8cd1b06c7..cce14fa4c 100644
--- a/.github/workflows/go-tests.yaml
+++ b/.github/workflows/go-tests.yaml
@@ -19,7 +19,7 @@ jobs:
     if: ${{ github.repository }} == 'chainguard-dev/malcontent'
     runs-on: mal-ubuntu-latest-8-core
     container:
-      image: cgr.dev/chainguard/wolfi-base@sha256:91ed94ec4e72368a9b5113f2ffb1d8e783a91db489011a89d9fad3e3816a75ba
+      image: cgr.dev/chainguard/wolfi-base:latest
       options: >-
         --cap-add DAC_OVERRIDE
         --cap-add SETGID
@@ -54,7 +54,7 @@ jobs:
     if: ${{ github.repository }} == 'chainguard-dev/malcontent'
     runs-on: mal-ubuntu-latest-8-core
     container:
-      image: cgr.dev/chainguard/wolfi-base@sha256:91ed94ec4e72368a9b5113f2ffb1d8e783a91db489011a89d9fad3e3816a75ba
+      image: cgr.dev/chainguard/wolfi-base:latest
       options: >-
         --cap-add DAC_OVERRIDE
         --cap-add SETGID
diff --git a/.github/workflows/style.yaml b/.github/workflows/style.yaml
index 6c74498de..199b845e6 100644
--- a/.github/workflows/style.yaml
+++ b/.github/workflows/style.yaml
@@ -117,7 +117,7 @@ jobs:
     name: golangci-lint
     runs-on: ubuntu-latest
     container:
-      image: cgr.dev/chainguard/wolfi-base@sha256:91ed94ec4e72368a9b5113f2ffb1d8e783a91db489011a89d9fad3e3816a75ba
+      image: cgr.dev/chainguard/wolfi-base:latest
       options: >-
         --cap-add DAC_OVERRIDE
         --cap-add SETGID
diff --git a/.github/workflows/third-party.yaml b/.github/workflows/third-party.yaml
index 1c707e2d4..5529f5fd0 100644
--- a/.github/workflows/third-party.yaml
+++ b/.github/workflows/third-party.yaml
@@ -13,7 +13,7 @@ jobs:
     if: ${{ github.repository }} == 'chainguard-dev/malcontent'
     runs-on: mal-ubuntu-latest-8-core
     container:
-      image: cgr.dev/chainguard/wolfi-base@sha256:91ed94ec4e72368a9b5113f2ffb1d8e783a91db489011a89d9fad3e3816a75ba
+      image: cgr.dev/chainguard/wolfi-base:latest
       options: >-
         --cap-add DAC_OVERRIDE
         --cap-add SETGID