diff --git a/Dockerfile b/Dockerfile
index 3c5727a3c0883e65c59fe4c5061245d8c76ce633..90567618d376fbf1851aab1be7d20312de236011 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/google/distroless/static
 ARG BASE_TAG=latest
 
-FROM gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.24.1 as build
+FROM gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.24.2 as build
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index a8a5b2b1822c77e62ecded7c22663424f135dab5..c2af7de132f3df26dd6c2ace2d5263c4a63a2a20 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "opensource/tektoncd/webhook"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "v0.24.1"
+- "v0.24.2"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -23,7 +23,7 @@ labels:
   org.opencontainers.image.licenses: "Apache v2"
   org.opencontainers.image.url: "https://github.com/tektoncd/pipeline/tree/master/cmd/webhook"
   org.opencontainers.image.vendor: "Vendor"
-  org.opencontainers.image.version: "v0.24.1"
+  org.opencontainers.image.version: "v0.24.2"
   mil.dso.ironbank.image.type: "opensource"
 
 # List of resources to make available to the offline build context