diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh
index 2fb78dab..14d247e8 100644
--- a/Dockerfile.cli-stack.rh
+++ b/Dockerfile.cli-stack.rh
@@ -1,4 +1,4 @@
-FROM quay.io/securesign/cli-tuftool@sha256:389b7951afda0f205a758a4edff83c8dc05e3dc30fb167e1c82b84e4ef45cd1f AS build-amd64
+FROM quay.io/securesign/cli-tuftool@sha256:96dd680be18d8d1c3eced452b9f455769fc5b94761dd72bb7cb76b1d3d19b637 AS build-amd64
 
 FROM registry.redhat.io/ubi9/go-toolset:9.7-1778604137@sha256:e06a6f4c85c3ca75f64127542449c9770fb885adfb592f987c576d268ac108de AS packager
 USER root