diff --git a/Dockerfile b/Dockerfile
index 60124891363e846ab94ea636d9bc229e19e7523c..fd254acc865177967b54705b9b250f4def848558 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,8 +1,8 @@
-ARG GITLAB_VERSION=v13.9.3-ubi8
+ARG GITLAB_VERSION=v13.9.4-ubi8
 
 ARG BASE_REGISTRY=nexus-docker-secure.levelup-nexus.svc.cluster.local:18082
 ARG BASE_IMAGE=gitlab/gitlab/gitlab-ruby
-ARG BASE_TAG=13.9.3
+ARG BASE_TAG=13.9.4
 
 ARG RUBY_IMAGE=${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
@@ -12,6 +12,15 @@ ARG GITLAB_USER=git
 ARG GITLAB_DATA=/var/opt/gitlab
 ARG DNF_OPTS
 
+LABEL source="https://gitlab.com/gitlab-org/build/CNG/-/tree/master/gitlab-rails" \
+      name="GitLab Rails" \
+      maintainer="GitLab Distribution Team" \
+      vendor="GitLab" \
+      version=${GITLAB_VERSION} \
+      release=${GITLAB_VERSION} \
+      summary="Rails container for GitLab." \
+      description="Rails container for GitLab."
+
 RUN dnf clean all \
     && rm -r /var/cache/dnf \
     && dnf ${DNF_OPTS} install -by --nodocs \
diff --git a/build-scripts/build.sh b/build-scripts/build.sh
index 2c1838da5132a2568699988fbd80014985b8c994..8a48777408de467c3e32bc792d8ab873d0dc3420 100755
--- a/build-scripts/build.sh
+++ b/build-scripts/build.sh
@@ -4,7 +4,7 @@
 
 set -euxo pipefail
 
-TAG=${1:-13.9.3}
+TAG=${1:-13.9.4}
 REPOSITORY=${2:-}
 DOCKER_OPTS=${DOCKER_OPTS:-""}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 7cc4e4c92b9d291831528e03fdfa04f41c7abaa4..b895f23c9b5f0441f15ee7901e7e0d96e7a1bd8c 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -5,12 +5,12 @@ name: "gitlab/gitlab/gitlab-rails"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-  - "13.9.3"
+  - "13.9.4"
   - "latest"
 # Build args passed to Dockerfile ARGs
 args:
   BASE_IMAGE: "gitlab/gitlab/gitlab-ruby"
-  BASE_TAG: "13.9.3"
+  BASE_TAG: "13.9.4"
 # Docker image labels
 labels:
   org.opencontainers.image.title: "Gitlab Rails"
@@ -22,7 +22,7 @@ labels:
   org.opencontainers.image.url: "https://about.gitlab.com/"
   ## Name of the distributing entity, organization or individual
   org.opencontainers.image.vendor: "Gitlab"
-  org.opencontainers.image.version: "13.9.3"
+  org.opencontainers.image.version: "13.9.4"
   ## Keywords to help with search (ex. "cicd,gitops,golang")
   mil.dso.ironbank.image.keywords: "gitlab, git, gitops"
   ## This value can be "opensource" or "commercial"
@@ -43,8 +43,8 @@ maintainers:
     username: "alfontaine"
     email: "alan.fontaine@centauricorp.com"
 resources: 
-  - url: "https://gitlab-ubi.s3.amazonaws.com/ubi8-build-dependencies-v13.9.3-ubi8/gitlab-rails-ee.tar.gz"
+  - url: "https://gitlab-ubi.s3.amazonaws.com/ubi8-build-dependencies-v13.9.4-ubi8/gitlab-rails-ee.tar.gz"
     filename: "gitlab-rails-ee.tar.gz"
     validation:
       type: "sha256"
-      value: "fe33ddefbdf7b96d57f487e403925f8678235eb325edf21fa8bba4f3c7aaa3dc"
+      value: "7e33d3d2f420a885d17b4f29bf2a263b0575bf3d6c886805d9fb8e7eb0493597"