diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh
index 94b78509..36a4b1d9 100644
--- a/Dockerfile.cli-stack.rh
+++ b/Dockerfile.cli-stack.rh
@@ -1,4 +1,4 @@
-FROM quay.io/securesign/cli-tuftool@sha256:2fbffa294cac96c7b618a23284555adec42dcb4afdaf6d90b6944541a56d9b69 AS build-amd64
+FROM quay.io/securesign/cli-tuftool@sha256:8cfb9940e7b237bab209872b0435b2a9174f148d1879bd799e1997b5fb35107a AS build-amd64
 
 FROM registry.redhat.io/ubi9/go-toolset:9.7-1774618347@sha256:0f4f6f7868962aa75dddfe4230b664bdf77071e92c43c70c824c58450e37693f AS packager
 USER root