diff --git a/Dockerfile.sam-console b/Dockerfile.sam-console
index dfd1cc9e..dd807dbd 100644
--- a/Dockerfile.sam-console
+++ b/Dockerfile.sam-console
@@ -1,4 +1,4 @@
-FROM golang:1.27.1-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125 AS builder
+FROM golang:1.27.1-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 AS builder
 
 WORKDIR /src
 COPY go.mod go.sum ./
diff --git a/tests/e2e/docker/Dockerfile.sam-runtime b/tests/e2e/docker/Dockerfile.sam-runtime
index e9d0e1b1..e2af3db4 100644
--- a/tests/e2e/docker/Dockerfile.sam-runtime
+++ b/tests/e2e/docker/Dockerfile.sam-runtime
@@ -3,7 +3,7 @@
 # Build container: compiles the Go binaries via `make build`.
 # 1.26 because nano-init's TCP stack requires it; the root module is happy on
 # anything newer than it asks for.
-FROM golang:1.27-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125 AS build
+FROM golang:1.27-alpine@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 AS build
 
 WORKDIR /src
 RUN apk add --no-cache git make