diff --git a/Dockerfile b/Dockerfile
index b1d6b6f3be42e87d3283dd734ee5a613a0b90ed7..80badafc009d1c677bbe7d426ba0647aa986adf4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/google/distroless/static
 ARG BASE_TAG=latest
 
-FROM gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/controller:v0.22.0 as build
+FROM gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/controller:v0.23.0 as build
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 6a3c4a6217807742c8c8e0a97df27618c2e0468a..d5fc32cd6b3101e32f063d7d82e6698496816f04 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "opensource/tektoncd/controller"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "v0.22.0"
+- "v0.23.0"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -23,13 +23,13 @@ labels:
   org.opencontainers.image.licenses: "Apache v2"
   org.opencontainers.image.url: "https://github.com/tektoncd/pipeline/tree/master/cmd/controller"
   org.opencontainers.image.vendor: "Vendor"
-  org.opencontainers.image.version: "v0.22.0"
+  org.opencontainers.image.version: "v0.23.0"
   mil.dso.ironbank.image.type: "opensource"
 
 # List of resources to make available to the offline build context
 resources:
-- url: "docker://gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/controller@sha256:e4a77f2e175d8b2519a35016923dc7486ca9b5fc373e277edfaef980ad759cf8"
-  tag: "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/controller:v0.22.0"
+- url: "docker://gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/controller@sha256:1e7a1b74357d8a755b8679e55c99898a221c3eed4ac28ef36123bbcc8b2f4829"
+  tag: "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/controller:v0.23.0"
 
 # List of project maintainers
 maintainers: