diff --git a/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helmrelease.yaml b/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helmrelease.yaml
index a0d35c83c..4b2f50c68 100644
--- a/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helmrelease.yaml
+++ b/kubernetes/cluster-0/apps/kube-tools/kyverno/policies/helmrelease.yaml
@@ -272,12 +272,12 @@ spec:
                             # Stagger jobs to run randomly within X seconds to avoid bringing down all apps at once
                             initContainers:
                               - name: wait
-                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:dfe496c5ab894bb5d6084150e7fc0a31c9d4d6472c2c9ea1e2e14ffee60d6d93
+                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:93e1da5cdf95db4f871d16262abbf4ea58f95e0591034cf65f4ced29e05c0bdf
                                 command: ["/scripts/sleep.sh"]
                                 args: ["1", "1800"]
                             containers:
                               - name: snapshot
-                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:dfe496c5ab894bb5d6084150e7fc0a31c9d4d6472c2c9ea1e2e14ffee60d6d93
+                                image: ghcr.io/onedr0p/kopia:0.12.1@sha256:93e1da5cdf95db4f871d16262abbf4ea58f95e0591034cf65f4ced29e05c0bdf
                                 env:
                                   - name: KOPIA_CACHE_DIRECTORY
                                     value: /snapshots/{{ namespace }}/{{ appName }}/{{ claimName }}/cache
diff --git a/kubernetes/cluster-0/apps/storage/kopia-web/helmrelease.yaml b/kubernetes/cluster-0/apps/storage/kopia-web/helmrelease.yaml
index 8f35e3d61..532c14a55 100644
--- a/kubernetes/cluster-0/apps/storage/kopia-web/helmrelease.yaml
+++ b/kubernetes/cluster-0/apps/storage/kopia-web/helmrelease.yaml
@@ -24,7 +24,7 @@ spec:
   values:
     initContainers:
       wait-for-repo:
-        image: ghcr.io/onedr0p/kopia:0.12.1@sha256:dfe496c5ab894bb5d6084150e7fc0a31c9d4d6472c2c9ea1e2e14ffee60d6d93
+        image: ghcr.io/onedr0p/kopia:0.12.1@sha256:93e1da5cdf95db4f871d16262abbf4ea58f95e0591034cf65f4ced29e05c0bdf
         command:
           - /bin/bash
           - -c
@@ -38,7 +38,7 @@ spec:
             mountPath: /snapshots
     image:
       repository: ghcr.io/onedr0p/kopia
-      tag: 0.12.1@sha256:dfe496c5ab894bb5d6084150e7fc0a31c9d4d6472c2c9ea1e2e14ffee60d6d93
+      tag: 0.12.1@sha256:93e1da5cdf95db4f871d16262abbf4ea58f95e0591034cf65f4ced29e05c0bdf
     env:
       TZ: "${TIMEZONE}"
       KOPIA_PASSWORD: "none"
diff --git a/kubernetes/tools/kopia-restore.yaml b/kubernetes/tools/kopia-restore.yaml
index 376d1a56f..077d228ec 100644
--- a/kubernetes/tools/kopia-restore.yaml
+++ b/kubernetes/tools/kopia-restore.yaml
@@ -12,7 +12,7 @@ spec:
       restartPolicy: OnFailure
       containers:
         - name: restore
-          image: ghcr.io/onedr0p/kopia:0.12.1@sha256:dfe496c5ab894bb5d6084150e7fc0a31c9d4d6472c2c9ea1e2e14ffee60d6d93
+          image: ghcr.io/onedr0p/kopia:0.12.1@sha256:93e1da5cdf95db4f871d16262abbf4ea58f95e0591034cf65f4ced29e05c0bdf
           env:
             - name: KOPIA_PASSWORD
               value: "none"