diff --git a/Dockerfile.clients.rh b/Dockerfile.clients.rh
index 7373ecd93ae..c99ccd32823 100644
--- a/Dockerfile.clients.rh
+++ b/Dockerfile.clients.rh
@@ -1,19 +1,19 @@
 # Provides the Trusted Artifact Signer CLI binaries, cosign and gitsign
-FROM quay.io/securesign/cli-cosign@sha256:2c3be51e9d813495c554bdddf696011375c9ded93473094090f83d8694597824 AS cosign
-FROM quay.io/securesign/gitsign@sha256:cb4f5354efa17c1ca6c974ae2aea629e8dc635a55ced1f702cb9e2e365789002 AS gitsign
+FROM quay.io/securesign/cli-cosign@sha256:bc5abe7734067a96d4e4b062c225954fdaecc73186f37c3d120968b9c8fb719c AS cosign
+FROM quay.io/securesign/gitsign@sha256:6193635582d569ffc150dab9be2b4d1ea7b4bb72b18363f068dee40d4e3303df AS gitsign
 
 # Provides the Trusted Artifact Signer CLI binary, fetch-tsa-certs
-FROM quay.io/securesign/fetch-tsa-certs@sha256:acb15dc04a3cfbb0431ac237fe3e27120c0d15061e77921a1576bb04d351dc1d as fetch_tsa_certs
+FROM quay.io/securesign/fetch-tsa-certs@sha256:2d0eb44a3677a4385b66bcb36ff6a0b5759fa911bda278af3bd923e856c5bfea as fetch_tsa_certs
 
 # Provides the Trusted Artifact Signer CLI binaries, rekor-cli and ec
 FROM quay.io/securesign/rekor-cli@sha256:7a47b37bfeebe2e95b90333869fda68d87587ff65aac7ce1c777ae75e882450a as rekor
 FROM registry.redhat.io/rhtas/ec-rhel9:0.7@sha256:62fe84e471def6f913d5c0815ae7f68479bcbcd9bb2518b86cac307cd54d5750 as ec
 
 # Provides the Trusted Artifact Signer CLI binaries trillian-createtree and trillian-updatetree
-FROM quay.io/securesign/trillian-createtree@sha256:812315ab0ef006799ebe158dff67773b56d5d5e86d07dee9341214d1b49f4542 as trillian-createtree
-FROM quay.io/securesign/trillian-updatetree@sha256:bfa0cd62454f67ab94aa0d8fe58f8c624fccb8abd91e7d968725ee412ecde07a as trillian-updatetree
+FROM quay.io/securesign/trillian-createtree@sha256:c5490942fa6e651c2412ebacf40cc522c5b90be5da61e790e9312ae6cbd8b1b7 as trillian-createtree
+FROM quay.io/securesign/trillian-updatetree@sha256:bc821e04548fb9eb0ab17e7d52d1fca8802cde453b388033c2e9e0924411f9cb as trillian-updatetree
 
-FROM quay.io/securesign/cli-tuftool@sha256:66b4e4de5185331ceb94fb9941a196a0d4664a0b6cbe6e4507a2305a29c523c1 as tuf-tool
+FROM quay.io/securesign/cli-tuftool@sha256:d53f28d42c51f5749cccdb411711d8cbe5e71865b6599067f6fb4567b65ea82f as tuf-tool
 
 FROM registry.redhat.io/ubi9/httpd-24@sha256:89108e0c5bf11ae53e2913b7fc0f1227592f498ac4058273d4b8c6749ca1e2c6
 ENV APP_ROOT=/opt/app-root