diff --git a/Dockerfile b/Dockerfile
index bb236dbd55a2feb4db82d2b45f772e6d01cee556..86383374676ebdbf67be74cb5f59ec8f38461c5e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/redhat/ubi/ubi8
 ARG BASE_TAG=8.3
 
-FROM istio/pilot:1.8.4 AS base
+FROM istio/pilot:1.8.5 AS base
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG} 
 
 COPY --from=base /usr/local/bin/pilot-discovery /usr/local/bin/pilot-discovery
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 43f63d6a4b648ad6a8950592b92bcdbf725acecf..43eaba83c2f50d8087f8f789b5f41052a5108512 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "opensource/istio-1.8/pilot"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "1.8.4"
+- "1.8.5"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -27,7 +27,7 @@ labels:
   org.opencontainers.image.url: "https://github.com/istio/istio/tree/master/pilot"
   ## Name of the distributing entity, organization or individual
   org.opencontainers.image.vendor: "opensource"
-  org.opencontainers.image.version: "1.8.4"
+  org.opencontainers.image.version: "1.8.5"
   ## Keywords to help with search (ex. "cicd,gitops,golang")
   mil.dso.ironbank.image.keywords: "istio,servishmesh"
   ## This value can be "opensource" or "commercial"
@@ -38,8 +38,8 @@ labels:
 
 # List of resources to make available to the offline build context
 resources:
-- tag: istio/pilot:1.8.4
-  url: docker://docker.io/istio/pilot@sha256:32fe6db58bd5be49079614f0254d7ce5f98a2bee10c3c389f5237b6122ffd7cc
+- tag: istio/pilot:1.8.5
+  url: docker://docker.io/istio/pilot@sha256:bda06fcc37ff87cda5908b181f34bc961e6fe5b790154017ca2dd6109b25b42c
 
 # List of project maintainers
 maintainers: