diff --git a/images/crane/Dockerfile b/images/crane/Dockerfile
index 4156bb5..8374d47 100644
--- a/images/crane/Dockerfile
+++ b/images/crane/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.19 AS crane
+FROM alpine:3.20 AS crane
 ARG VERSION=0.17.0
 # RUN apk add --no-cache go && go install github.com/slsa-framework/slsa-verifier/cli/slsa-verifier@v1.3.1
 RUN ARCH=$(uname -m) OS=$(uname) && \
@@ -7,7 +7,7 @@ RUN ARCH=$(uname -m) OS=$(uname) && \
     # ~/go/bin/slsa-verifier -artifact-path go-containerregistry.tar.gz -provenance provenance.intoto.jsonl -source github.com/google/go-containerregistry -tag "v${VERSION}" && \
     tar xvzf go-containerregistry.tar.gz -C /bin
 
-FROM alpine:3.19
+FROM alpine:3.20
 COPY --from=crane /bin/crane /bin/crane
 RUN apk add --no-cache bash tar