diff --git a/Dockerfile b/Dockerfile
index 075b1e3941efde99c5a9dab5e141d45f25675057..b273bdb587d848c870765cf5b89032109cf1f760 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dsop.io
 ARG BASE_IMAGE=ironbank/redhat/ubi/ubi8
 ARG BASE_TAG=8.2
 
-FROM openpolicyagent/opa:0.22.0 as base
+FROM openpolicyagent/opa:0.23.1 as base
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
@@ -10,7 +10,7 @@ LABEL org.opencontainers.image.title="openpolicyagent/opa" \
       org.opencontainers.image.description="The Open Policy Agent (OPA) is an open source project to policy-enable the service." \
       org.opencontainers.image.licenses="Apache-2.0" \
       org.opencontainers.image.url="https://github.com/open-policy-agent/opa" \
-      org.opencontainers.image.version="0.22.0" \
+      org.opencontainers.image.version="0.23.1" \
       maintainer="cht@dsop.io"
 
 RUN dnf upgrade -y && \
@@ -22,6 +22,8 @@ COPY --from=base /opa /opa
 HEALTHCHECK --interval=5s --timeout=5s --start-period=5s --retries=3 \
   CMD curl -f http://locahost:8181/health || exit 1
 
+USER 1001
+
 ENTRYPOINT ["/opa"]
 
 CMD ["run"]
diff --git a/Jenkinsfile b/Jenkinsfile
index 1d1b87c8bf83421644bb8941bbc177b49bde3110..3bdf71a952f3923ab41fa6fe0a6c26b2d960f223 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -1,2 +1,2 @@
 @Library('DCCSCR@master') _
-dccscrPipeline(version: "0.22.0")
+dccscrPipeline(version: "0.23.1")
diff --git a/download.yaml b/download.yaml
index 00c74ff48be59f460273f3c2a9c1dd987fca2a32..d15c3927ce45095202a943d476a5053ae38dd12f 100644
--- a/download.yaml
+++ b/download.yaml
@@ -1,3 +1,3 @@
 resources:
-  - url: "docker://docker.io/openpolicyagent/opa@sha256:bc04fb10c02c3cbd73fc7e612841a22f21e65dc4db1377540a5ad3953da241ba"
-    tag: "openpolicyagent/opa:0.22.0"
+  - url: "docker://docker.io/openpolicyagent/opa@sha256:e25c1804b974e2427bcfd6ade9eaab05473ce2700c2d2d51429029b1b4f6569b"
+    tag: "openpolicyagent/opa:0.23.1"