diff --git a/Dockerfile b/Dockerfile
index 9d0967b..eb59d0d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,10 +1,12 @@
-ARG ALPINE=alpine:3.17.2
+ARG ALPINE=alpine:3.20
 FROM ${ALPINE} AS verify
 ARG ARCH
 ARG TAG
 WORKDIR /verify
 ADD https://github.com/k3s-io/k3s/releases/download/${TAG}/sha256sum-${ARCH}.txt .
 RUN set -x \
+ && apk update \
+ && apk --no-cache upgrade \
  && apk --no-cache add \
     curl \
     file
@@ -26,7 +28,9 @@ RUN if [ "${ARCH}" == "amd64" ]; then \
 FROM ${ALPINE}
 ARG ARCH
 ARG TAG
-RUN apk --no-cache add \
+RUN apk update \
+ && apk --no-cache upgrade \
+ && apk --no-cache add \
   jq libselinux-utils procps
 COPY --from=verify /opt/k3s /opt/k3s
 COPY scripts/upgrade.sh /bin/upgrade.sh
diff --git a/Dockerfile.manifest b/Dockerfile.manifest
index 8170c3b..e12f968 100644
--- a/Dockerfile.manifest
+++ b/Dockerfile.manifest
@@ -1,4 +1,4 @@
-FROM alpine:3.18.4
+FROM alpine:3.20
 
 COPY --from=plugins/manifest:1.2.3 /bin/* /bin/
 
@@ -11,6 +11,9 @@ ENV DOCKER_PASSWORD $DOCKER_PASSWORD
 ARG DRONE_TAG
 ENV DRONE_TAG $DRONE_TAG
 
+RUN apk update \
+ && apk --no-cache upgrade
+
 COPY ./scripts/manifest /bin/
 
 RUN manifest