diff --git a/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helm-release.yaml b/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helm-release.yaml
index 3f13d9b96..6d212d645 100644
--- a/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helm-release.yaml
+++ b/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helm-release.yaml
@@ -272,12 +272,12 @@ spec:
                             # Stagger jobs to run randomly within X seconds to avoid bringing down all apps at once
                             initContainers:
                               - name: wait
-                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:88106e6bb642ee4cb58b61a335ff55992ee2c03493f1aec804422774cf7cf063
+                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:298d9319dc0e6ce37c902b8999db8712d42d073962ef745380c7595ae2010937
                                 command: ["/scripts/sleep.sh"]
                                 args: ["1", "1800"]
                             containers:
                               - name: snapshot
-                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:88106e6bb642ee4cb58b61a335ff55992ee2c03493f1aec804422774cf7cf063
+                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:298d9319dc0e6ce37c902b8999db8712d42d073962ef745380c7595ae2010937
                                 env:
                                   - name: KOPIA_CACHE_DIRECTORY
                                     value: /snapshots/{{ namespace }}/{{ appName }}/{{ claimName }}/cache
diff --git a/kubernetes/cluster-0/apps/storage/kopia-web/helm-release.yaml b/kubernetes/cluster-0/apps/storage/kopia-web/helm-release.yaml
index bcdba6398..e8699a2a2 100644
--- a/kubernetes/cluster-0/apps/storage/kopia-web/helm-release.yaml
+++ b/kubernetes/cluster-0/apps/storage/kopia-web/helm-release.yaml
@@ -24,7 +24,7 @@ spec:
   values:
     initContainers:
       wait-for-repo:
-        image: ghcr.io/onedr0p/kopia:0.12.1@sha256:88106e6bb642ee4cb58b61a335ff55992ee2c03493f1aec804422774cf7cf063
+        image: ghcr.io/onedr0p/kopia:0.12.1@sha256:298d9319dc0e6ce37c902b8999db8712d42d073962ef745380c7595ae2010937
         command:
           - /bin/bash
           - -c
@@ -38,7 +38,7 @@ spec:
             mountPath: /snapshots
     image:
       repository: ghcr.io/onedr0p/kopia
-      tag: 0.12.1@sha256:88106e6bb642ee4cb58b61a335ff55992ee2c03493f1aec804422774cf7cf063
+      tag: 0.12.1@sha256:298d9319dc0e6ce37c902b8999db8712d42d073962ef745380c7595ae2010937
     env:
       TZ: "${TIMEZONE}"
       KOPIA_PASSWORD: "none"
diff --git a/kubernetes/tools/kopia-restore.yaml b/kubernetes/tools/kopia-restore.yaml
index 1c0562cf3..26d759b77 100644
--- a/kubernetes/tools/kopia-restore.yaml
+++ b/kubernetes/tools/kopia-restore.yaml
@@ -12,7 +12,7 @@ spec:
       restartPolicy: OnFailure
       containers:
         - name: restore
-          image: ghcr.io/onedr0p/kopia:0.12.1@sha256:88106e6bb642ee4cb58b61a335ff55992ee2c03493f1aec804422774cf7cf063
+          image: ghcr.io/onedr0p/kopia:0.12.1@sha256:298d9319dc0e6ce37c902b8999db8712d42d073962ef745380c7595ae2010937
           env:
             - name: KOPIA_PASSWORD
               value: "none"