diff --git a/Dockerfile b/Dockerfile
index a39acc5a1529e4719d810dc20e0ad92405d4afdd..316a01c4ebb63610df649551293cba17c8a8ff59 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/google/distroless/static
 ARG BASE_TAG=latest
 
-FROM gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.22.0 as build
+FROM gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.23.0 as build
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index ed0522d492e9aaf490265e96e95643ad56c89bc9..f12badcf7c3817efc124a13120d3b34e021574c8 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "opensource/tektoncd/webhook"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "v0.22.0"
+- "v0.23.0"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -23,13 +23,13 @@ labels:
   org.opencontainers.image.licenses: "Apache v2"
   org.opencontainers.image.url: "https://github.com/tektoncd/pipeline/tree/master/cmd/webhook"
   org.opencontainers.image.vendor: "Vendor"
-  org.opencontainers.image.version: "v0.22.0"
+  org.opencontainers.image.version: "v0.23.0"
   mil.dso.ironbank.image.type: "opensource"
 
 # List of resources to make available to the offline build context
 resources:
-- url: "docker://gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook@sha256:ed67074f90c13f4e89b05340199495eefe4fc85c8b0048096e9748d60c7f667c"
-  tag: "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.22.0"
+- url: "docker://gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook@sha256:7606e9073d11a304aa57767d2efa635a4b1466e3e523529f3975ce5fb63b7c5f"
+  tag: "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/webhook:v0.23.0"
 
 # List of project maintainers
 maintainers: