diff --git a/Dockerfile b/Dockerfile
index 90567618d376fbf1851aab1be7d20312de236011..e76371fc3f88f5a436f373a78675e136c542f899 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/google/distroless/static
 ARG BASE_TAG=latest
 
-FROM gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.24.2 as build
+FROM gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.24.3 as build
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 846a3b5a99c07fe34e9c4c599739da1fc5d1f803..3f3edac86cdf7ecf958956c7e07dff4a0bee3d4b 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "opensource/tektoncd/webhook"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "v0.24.2"
+- "v0.24.3"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -23,13 +23,13 @@ labels:
   org.opencontainers.image.licenses: "Apache v2"
   org.opencontainers.image.url: "https://github.com/tektoncd/pipeline/tree/master/cmd/webhook"
   org.opencontainers.image.vendor: "Vendor"
-  org.opencontainers.image.version: "v0.24.2"
+  org.opencontainers.image.version: "v0.24.3"
   mil.dso.ironbank.image.type: "opensource"
 
 # List of resources to make available to the offline build context
 resources:
-- url: "docker://gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook@sha256:394fe28f330d44ccf6d56c12b06607d14802ed2a14ee5ad91028759cafedf0fe"
-  tag: "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.24.2"
+- url: "docker://gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook@sha256:957c8869b3ff8860ee83ad469160d9a72037fe5a483271b631ea393343d4e065"
+  tag: "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.24.3"
 
 # List of project maintainers
 maintainers: