diff --git a/Dockerfile b/Dockerfile
index 9f5ed41d56dd225244e15009792affc8939a1575..1b4b7927e2b491362d53bcf80c97a6732512ea54 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/opensource/nodejs/nodejs14
 ARG BASE_TAG=14.17.0
 
-FROM mitre/heimdall2:version-2.4.6 AS source
+FROM mitre/heimdall2:version-2.4.7 AS source
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 8cdb0c6b090dd2fbde224510012b5a7bb45ee62a..245561640ee69505f3e94aefd56dc785bf4bf595 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "mitre/saf/heimdall2"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dso.mil
 tags:
-- "2.4.6"
+- "2.4.7"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -29,7 +29,7 @@ labels:
   # Name of the distributing entity, organization or individual
   org.opencontainers.image.vendor: "MITRE"
   # Authoritative version of the software
-  org.opencontainers.image.version: "2.4.6"
+  org.opencontainers.image.version: "2.4.7"
   # Keywords to help with search (ex. "cicd,gitops,golang")
   mil.dso.ironbank.image.keywords: "saf"
   # This value can be "opensource" or "commercial"
@@ -47,8 +47,8 @@ resources:
       value: 7e433d4a77e2c79e6a7ae4866782608a8e8bcad3ec6783580577c59538381a6e
 
   # This is the official upstream docker image of Heimdall2
-  - tag: mitre/heimdall2:version-2.4.6
-    url: docker://docker.io/mitre/heimdall2@sha256:9253d4cbb8ee6a08147e0bb4ce2b87232719cca73014fb367e6925d3e481e00c
+  - tag: mitre/heimdall2:version-2.4.7
+    url: docker://docker.io/mitre/heimdall2@sha256:c02dfe81c286fb16142e92912c0ae0d67c22748304d591b893361c48c549107a
 
 # List of project maintainers
 maintainers: