diff --git a/docker-compose.yml b/docker-compose.yml
index 0a2b7be..e3bf738 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -9,7 +9,7 @@ services:
   # only inside this short-lived sidecar that exits before any workflow runs),
   # a compromised PR can never read it. See mint-runner-token.sh for details.
   roku-runner-registrar:
-    image: alpine:latest@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a
+    image: alpine:latest@sha256:f59abe656b692d901e184be3445e084786602108599d2a51d229c0f5a48c71bf
     container_name: roku-runner-registrar
     environment:
       - TZ=${TIMEZONE:-America/New_York}
@@ -118,7 +118,7 @@ services:
         max-file: "3"
 
   iptables-sidecar:
-    image: alpine:latest@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a
+    image: alpine:latest@sha256:f59abe656b692d901e184be3445e084786602108599d2a51d229c0f5a48c71bf
     container_name: roku-iptables
     cap_add:
       - NET_ADMIN