diff --git a/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helmrelease.yaml b/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helmrelease.yaml
index 4b2f50c68..1521d45e0 100644
--- a/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helmrelease.yaml
+++ b/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helmrelease.yaml
@@ -272,12 +272,12 @@ spec:
                             # Stagger jobs to run randomly within X seconds to avoid bringing down all apps at once
                             initContainers:
                               - name: wait
-                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:93e1da5cdf95db4f871d16262abbf4ea58f95e0591034cf65f4ced29e05c0bdf
+                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:01ed9b934fa40216f17ffc8a906cf7a7e21c8d41a93f5ed571f2e5efa43844a7
                                 command: ["/scripts/sleep.sh"]
                                 args: ["1", "1800"]
                             containers:
                               - name: snapshot
-                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:93e1da5cdf95db4f871d16262abbf4ea58f95e0591034cf65f4ced29e05c0bdf
+                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:01ed9b934fa40216f17ffc8a906cf7a7e21c8d41a93f5ed571f2e5efa43844a7
                                 env:
                                   - name: KOPIA_CACHE_DIRECTORY
                                     value: /snapshots/{{ namespace }}/{{ appName }}/{{ claimName }}/cache
diff --git a/kubernetes/cluster-0/apps/storage/kopia-web/helmrelease.yaml b/kubernetes/cluster-0/apps/storage/kopia-web/helmrelease.yaml
index 532c14a55..9bd579295 100644
--- a/kubernetes/cluster-0/apps/storage/kopia-web/helmrelease.yaml
+++ b/kubernetes/cluster-0/apps/storage/kopia-web/helmrelease.yaml
@@ -24,7 +24,7 @@ spec:
   values:
     initContainers:
       wait-for-repo:
-        image: ghcr.io/onedr0p/kopia:0.12.1@sha256:93e1da5cdf95db4f871d16262abbf4ea58f95e0591034cf65f4ced29e05c0bdf
+        image: ghcr.io/onedr0p/kopia:0.12.1@sha256:01ed9b934fa40216f17ffc8a906cf7a7e21c8d41a93f5ed571f2e5efa43844a7
         command:
           - /bin/bash
           - -c
@@ -38,7 +38,7 @@ spec:
             mountPath: /snapshots
     image:
       repository: ghcr.io/onedr0p/kopia
-      tag: 0.12.1@sha256:93e1da5cdf95db4f871d16262abbf4ea58f95e0591034cf65f4ced29e05c0bdf
+      tag: 0.12.1@sha256:01ed9b934fa40216f17ffc8a906cf7a7e21c8d41a93f5ed571f2e5efa43844a7
     env:
       TZ: "${TIMEZONE}"
       KOPIA_PASSWORD: "none"
diff --git a/kubernetes/tools/kopia-restore.yaml b/kubernetes/tools/kopia-restore.yaml
index 077d228ec..ae05bb108 100644
--- a/kubernetes/tools/kopia-restore.yaml
+++ b/kubernetes/tools/kopia-restore.yaml
@@ -12,7 +12,7 @@ spec:
       restartPolicy: OnFailure
       containers:
         - name: restore
-          image: ghcr.io/onedr0p/kopia:0.12.1@sha256:93e1da5cdf95db4f871d16262abbf4ea58f95e0591034cf65f4ced29e05c0bdf
+          image: ghcr.io/onedr0p/kopia:0.12.1@sha256:01ed9b934fa40216f17ffc8a906cf7a7e21c8d41a93f5ed571f2e5efa43844a7
           env:
             - name: KOPIA_PASSWORD
               value: "none"