diff --git a/Dockerfile b/Dockerfile
index cf8f694f7f532da60055d3ff7442c125b22ddb35..f3e26b24bee48f6400dfccfa0d01f1f73bed9cbe 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,11 +2,11 @@ ARG BASE_REGISTRY=registry1.dso.mil
 ARG BASE_IMAGE=ironbank/redhat/openjdk/openjdk11
 ARG BASE_TAG=1.11
 
-FROM sonarqube:8.8-community AS build
+FROM sonarqube:8.9-community AS build
 
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
-ARG SONARQUBE_VERSION="8.8-community"
+ARG SONARQUBE_VERSION="8.9-community"
 ENV SONAR_VERSION="${SONARQUBE_VERSION}" \
     SONARQUBE_HOME="/opt/sonarqube" \
     SQ_DATA_DIR="/opt/sonarqube/data" \
diff --git a/Kptfile b/Kptfile
index e3fda0126cc059f11540c8cdab4f0e7f3d8661e0..c4ac0a3bd3fa02ee3f9a485dd5b6a122dbd5df14 100644
--- a/Kptfile
+++ b/Kptfile
@@ -9,5 +9,5 @@ dependencies:
     git:
         repo: https://github.com/SonarSource/docker-sonarqube
         directory: /8/community
-        ref: 8.7.1
+        ref: 8.9
     updateStrategy: resource-merge
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index b345e1af8d4abf6fc63cd2021e8e86f9db38bec1..6b4e753927280194af2ae898159476bd8c807804 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -8,7 +8,7 @@ name: "sonarsource/sonarqube/sonarqube8-community"
 # The most specific version should be the first tag and will be shown
 # on ironbank.dsop.io
 tags:
-- "8.8-community"
+- "8.9-community"
 - "latest"
 
 # Build args passed to Dockerfile ARGs
@@ -27,7 +27,7 @@ labels:
   org.opencontainers.image.url: "https://docs.sonarqube.org/latest/"
   ## Name of the distributing entity, organization or individual
   org.opencontainers.image.vendor: "SonarSource SA"
-  org.opencontainers.image.version: "8.8-community"
+  org.opencontainers.image.version: "8.9-community"
   ## Keywords to help with search (ex. "cicd,gitops,golang")
   mil.dso.ironbank.image.keywords: "cicd,devops,sast,review"
   ## This value can be "opensource" or "commercial"
@@ -37,8 +37,8 @@ labels:
 
 # List of resources to make available to the offline build context
 resources:
-- url: docker://docker.io/library/sonarqube@sha256:295adc389f8534d1a3e8ed049d4a36848c3bc26bbcba1042499a2ab752288057
-  tag: sonarqube:8.8-community
+- url: docker://docker.io/library/sonarqube@sha256:836e3b543f34c36438456e0c7a03fef314cbb77741e790920aa2565d83f0c9e4
+  tag: sonarqube:8.9-community
 
 # List of project maintainers
 maintainers: