diff --git a/skaffold.yaml b/skaffold.yaml
index ac454b0ff78..5c76602636c 100644
--- a/skaffold.yaml
+++ b/skaffold.yaml
@@ -1,7 +1,7 @@
 package:
   name: skaffold
   version: "2.17.0"
-  epoch: 2 # CVE-2025-61729
+  epoch: 3 # GHSA-4qg8-fj49-pxjh
   description: Easy and Repeatable Kubernetes Development
   copyright:
     - license: Apache-2.0
@@ -23,6 +23,7 @@ pipeline:
     with:
       deps: |-
         golang.org/x/crypto@v0.45.0
+        github.com/sigstore/timestamp-authority@v2.0.3
 
   - uses: go/build
     with: