diff --git a/Dockerfile b/Dockerfile
index 9c7b2d83f9c4..1113c80aa9d5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.19.1
+FROM alpine:3.20.3
 RUN apk --no-cache add ca-certificates git
 COPY trivy /usr/local/bin/trivy
 COPY contrib/*.tpl contrib/
diff --git a/Dockerfile.canary b/Dockerfile.canary
index f42b34519499..3c37c877dd32 100644
--- a/Dockerfile.canary
+++ b/Dockerfile.canary
@@ -1,4 +1,4 @@
-FROM alpine:3.19.1
+FROM alpine:3.20.3
 RUN apk --no-cache add ca-certificates git
 
 # binaries were created with GoReleaser