diff --git a/apps/autoscan/Dockerfile b/apps/autoscan/Dockerfile
index 49a71124..85c7de84 100644
--- a/apps/autoscan/Dockerfile
+++ b/apps/autoscan/Dockerfile
@@ -1,6 +1,6 @@
 
 
-FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:8f14b99247d836d83ebf7788197bc1ed6e676b69933352f95c006e7d3b253db9 as builder
+FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:b45268d9e708d20793c55803d550b9fc64ecfc000b82ea043712076d913af089 as builder
 ARG TARGETARCH
 ARG VENDOR
 ARG VERSION
diff --git a/apps/caddy/Dockerfile b/apps/caddy/Dockerfile
index 53640f70..72d3719b 100644
--- a/apps/caddy/Dockerfile
+++ b/apps/caddy/Dockerfile
@@ -1,6 +1,6 @@
 
 
-FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:8f14b99247d836d83ebf7788197bc1ed6e676b69933352f95c006e7d3b253db9 as builder
+FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:b45268d9e708d20793c55803d550b9fc64ecfc000b82ea043712076d913af089 as builder
 ARG TARGETARCH
 ARG VENDOR
 ARG VERSION
diff --git a/apps/devcontainer/Dockerfile b/apps/devcontainer/Dockerfile
index a9dc3f12..9322acff 100644
--- a/apps/devcontainer/Dockerfile
+++ b/apps/devcontainer/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:8f14b99247d836d83ebf7788197bc1ed6e676b69933352f95c006e7d3b253db9 AS go
+FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:b45268d9e708d20793c55803d550b9fc64ecfc000b82ea043712076d913af089 AS go
 
 # hadolint ignore=DL3007
 FROM ghcr.io/trueforge-org/python:3.13.7@sha256:9339a4781b93a9baa1cd0378613939fc7fedcd032f0852fc7680688ab655f533
diff --git a/apps/hishtory-server/Dockerfile b/apps/hishtory-server/Dockerfile
index 48f75383..ac0143ae 100644
--- a/apps/hishtory-server/Dockerfile
+++ b/apps/hishtory-server/Dockerfile
@@ -1,5 +1,5 @@
 ## TODO: pin version tag
-FROM ghcr.io/trueforge-org/golang:rolling@sha256:8f14b99247d836d83ebf7788197bc1ed6e676b69933352f95c006e7d3b253db9 AS builder
+FROM ghcr.io/trueforge-org/golang:rolling@sha256:b45268d9e708d20793c55803d550b9fc64ecfc000b82ea043712076d913af089 AS builder
 
 ARG TARGETARCH
 ARG VERSION
diff --git a/apps/kube-sa-proxy/Dockerfile b/apps/kube-sa-proxy/Dockerfile
index 296600db..693ee210 100644
--- a/apps/kube-sa-proxy/Dockerfile
+++ b/apps/kube-sa-proxy/Dockerfile
@@ -1,5 +1,5 @@
 # Stage 1 - Build the Go application
-FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:8f14b99247d836d83ebf7788197bc1ed6e676b69933352f95c006e7d3b253db9 AS builder
+FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:b45268d9e708d20793c55803d550b9fc64ecfc000b82ea043712076d913af089 AS builder
 
 USER root
 
diff --git a/apps/nextcloud-imaginary/Dockerfile b/apps/nextcloud-imaginary/Dockerfile
index 97f990aa..b92577e8 100644
--- a/apps/nextcloud-imaginary/Dockerfile
+++ b/apps/nextcloud-imaginary/Dockerfile
@@ -1,5 +1,5 @@
 # Stage 1: Build imaginary binary
-FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:8f14b99247d836d83ebf7788197bc1ed6e676b69933352f95c006e7d3b253db9 as go
+FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:b45268d9e708d20793c55803d550b9fc64ecfc000b82ea043712076d913af089 as go
 
 ARG IMAGINARY_COMMIT=b632dae8cc321452c3f85bcae79c580b1ae1ed84
 
@@ -17,7 +17,7 @@ RUN set -ex; \
     go install github.com/h2non/imaginary@${IMAGINARY_COMMIT}
 
 # Stage 2: Minimal runtime
-FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:8f14b99247d836d83ebf7788197bc1ed6e676b69933352f95c006e7d3b253db9
+FROM ghcr.io/trueforge-org/golang:1.25.1@sha256:b45268d9e708d20793c55803d550b9fc64ecfc000b82ea043712076d913af089
 
 USER root
 
diff --git a/apps/watchtower/Dockerfile b/apps/watchtower/Dockerfile
index be7b791b..625408b9 100644
--- a/apps/watchtower/Dockerfile
+++ b/apps/watchtower/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/trueforge-org/golang:rolling@sha256:8f14b99247d836d83ebf7788197bc1ed6e676b69933352f95c006e7d3b253db9 AS builder
+FROM ghcr.io/trueforge-org/golang:rolling@sha256:b45268d9e708d20793c55803d550b9fc64ecfc000b82ea043712076d913af089 AS builder
 
 USER root