diff --git a/Dockerfile b/Dockerfile
index 113b687d406009fd967f24c3191ebe9dd5804243..a39acc5a1529e4719d810dc20e0ad92405d4afdd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/google/distroless/static
 ARG BASE_TAG=latest
 
-FROM gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.20.1 as build
+FROM gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.22.0 as build
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index ff5b57ba9655ae852d568ab5a48646ea41e8fce4..ed0522d492e9aaf490265e96e95643ad56c89bc9 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "opensource/tektoncd/webhook"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "v0.20.1"
+- "v0.22.0"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -23,13 +23,13 @@ labels:
   org.opencontainers.image.licenses: "Apache v2"
   org.opencontainers.image.url: "https://github.com/tektoncd/pipeline/tree/master/cmd/webhook"
   org.opencontainers.image.vendor: "Vendor"
-  org.opencontainers.image.version: "v0.20.1"
+  org.opencontainers.image.version: "v0.22.0"
   mil.dso.ironbank.image.type: "opensource"
 
 # List of resources to make available to the offline build context
 resources:
-- url: "docker://gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook@sha256:48708800185088e4a87c3ceb8fb1059ea657efa46fe091af87173ab635ef3309"
-  tag: "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.20.1"
+- url: "docker://gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook@sha256:ed67074f90c13f4e89b05340199495eefe4fc85c8b0048096e9748d60c7f667c"
+  tag: "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.22.0"
 
 # List of project maintainers
 maintainers:
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000000000000000000000000000000000000..6315f01cbc592269ee465e2268a69eec8bbf18e0
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,39 @@
+{
+    "assignees": [
+      "@msimmons719"
+    ],
+    "baseBranches": [
+      "development"
+    ],
+    "packageRules": [
+        {
+            "datasources": ["docker"],
+            "packageNames": ["gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook"],
+            "updateTypes": ["minor", "patch", "digest"],
+            "groupName": "docker updates",
+            "automerge": true
+        }
+    ],
+    "regexManagers": [
+        {
+            "fileMatch": [
+                "^hardening_manifest.yaml$"
+            ],
+            "matchStrings": [
+                "org\\.opencontainers\\.image\\.version:\\s+\"(?<currentValue>.+?)\""
+            ],
+            "depNameTemplate": "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook",
+            "datasourceTemplate": "docker"
+        },
+        {
+            "fileMatch": [
+                "^hardening_manifest.yaml$"
+            ],
+            "matchStrings": [
+                "tags:\\s+-\\s+\"(?<currentValue>.+?)\""
+            ],
+            "depNameTemplate": "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook",
+            "datasourceTemplate": "docker"
+        }
+    ]
+}