diff --git a/.ko.yaml b/.ko.yaml
index 1521b49b1..e6ff26d65 100644
--- a/.ko.yaml
+++ b/.ko.yaml
@@ -1 +1 @@
-defaultBaseImage: cgr.dev/chainguard/static@sha256:67a1b00e0134e2b3a614c7198a26f7deed9d11b7acad4d52c79c0cfd47a2eae7
+defaultBaseImage: ghcr.io/wolfi-dev/static:alpine@sha256:2a0e1651c779fd24cea09a5ec6a0437117ff5d1fbe5fafe78020dfb8cc757018
diff --git a/src/api/resources/import-resources-pipelinerun.yaml b/src/api/resources/import-resources-pipelinerun.yaml
index 6c7092211..ed569495e 100644
--- a/src/api/resources/import-resources-pipelinerun.yaml
+++ b/src/api/resources/import-resources-pipelinerun.yaml
@@ -57,7 +57,7 @@ spec:
             - name: repo
           steps:
             - name: clone
-              image: cgr.dev/chainguard/git:latest@sha256:2c70afb3b34ca5feab37c5826c32dae6e0c48549486fdf6be93faf928b658efe  # 2.41
+              image: ghcr.io/wolfi-dev/git:alpine@sha256:3a118879b998f146812c11630805863f8a769587460938cbcc1daca874d9b57c  # 2.45
               env:
                 - name: PARAM_URL
                   value: $(params.repositoryURL)