diff --git a/.drone.yml b/.drone.yml
index 445b4da..4c07445 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -10,7 +10,7 @@ platform:
 steps:
 - name: build
   pull: always
-  image: rancher/hardened-build-base:v1.21.8b1
+  image: rancher/hardened-build-base:v1.21.9b1
   commands:
   - make DRONE_TAG=${DRONE_TAG}
   volumes:
@@ -18,7 +18,7 @@ steps:
     path: /var/run/docker.sock
 
 - name: publish
-  image: rancher/hardened-build-base:v1.21.8b1
+  image: rancher/hardened-build-base:v1.21.9b1
   commands:
   - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
   - make DRONE_TAG=${DRONE_TAG} image-push
@@ -35,7 +35,7 @@ steps:
     - tag
 
 - name: scan
-  image: rancher/hardened-build-base:v1.21.8b1
+  image: rancher/hardened-build-base:v1.21.9b1
   commands:
   - make DRONE_TAG=${DRONE_TAG} image-scan
   volumes:
@@ -59,7 +59,7 @@ platform:
 steps:
 - name: build
   pull: always
-  image: rancher/hardened-build-base:v1.21.8b1
+  image: rancher/hardened-build-base:v1.21.9b1
   commands:
   - make DRONE_TAG=${DRONE_TAG}
   volumes:
@@ -67,7 +67,7 @@ steps:
     path: /var/run/docker.sock
 
 - name: publish
-  image: rancher/hardened-build-base:v1.21.8b1
+  image: rancher/hardened-build-base:v1.21.9b1
   commands:
   - docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD
   - make DRONE_TAG=${DRONE_TAG} image-push
@@ -84,7 +84,7 @@ steps:
     - tag
 
 - name: scan
-  image: rancher/hardened-build-base:v1.21.8b1
+  image: rancher/hardened-build-base:v1.21.9b1
   commands:
   - make DRONE_TAG=${DRONE_TAG} image-scan
   volumes:
diff --git a/Dockerfile b/Dockerfile
index ec2877b..6a8fdb6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 ARG BCI_IMAGE=registry.suse.com/bci/bci-busybox
-ARG GO_IMAGE=rancher/hardened-build-base:v1.21.8b1
+ARG GO_IMAGE=rancher/hardened-build-base:v1.21.9b1
 FROM ${BCI_IMAGE} as bci
 
 FROM ${GO_IMAGE} as builder