diff --git a/config.yaml b/config.yaml
index 2ffcc1a..930f39d 100644
--- a/config.yaml
+++ b/config.yaml
@@ -67,13 +67,13 @@ sync:
   - source: quay.io/fedora/fedora:38@sha256:6349d2df6b4322c5690df1bb7743c45c356e20471dda69f27218cd9ba4a6c3c7 # 38 for 2024-01-28
     destination: ghcr.io/geonet/base-images/fedora:38
     auto-update-mutable-tag-digest: true
-  - source: quay.io/fedora/fedora:39@sha256:490a2eb8c9ae75eb4f1cef7cd6bcd73c3fcc00e1a4822d3be592ff917b1353cf # 39
+  - source: quay.io/fedora/fedora:39@sha256:6a4335d6aee49ce7033d35cb950bd8d560ef3068920b10edad0289554c15de15 # 39 for 2024-04-02
     destination: ghcr.io/geonet/base-images/fedora:39
     auto-update-mutable-tag-digest: true
   - source: quay.io/fedora/fedora:38-aarch64@sha256:fb9ae7277805988d510b275e93a1cdcef2a5ea45b112b19f8641b0e9b82a614f # 38-aarch64 for 2024-01-28
     destination: ghcr.io/geonet/base-images/fedora:38-aarch64
     auto-update-mutable-tag-digest: true
-  - source: quay.io/fedora/fedora:39-aarch64@sha256:2562f434d7d14c6c9a9e0c0ae3882171c2289aae0c246b9c84afe79804b4fa7a # 38-aarch64
+  - source: quay.io/fedora/fedora:39-aarch64@sha256:c2c621e2f301e972e2e516e58f4d4741056ffcb81ced11b0c263fe1b0fe64c63 # 39-aarch64 for 2024-04-02
     destination: ghcr.io/geonet/base-images/fedora:39-aarch64
     auto-update-mutable-tag-digest: true
   - source: quay.io/fedora/fedora-coreos:stable@sha256:e051dc27610ecf6b34b0a648f73e1ad423a437a7d7a87adc6bc4feab73d3b081 # stable for 2024-03-27
@@ -85,7 +85,7 @@ sync:
   - source: quay.io/centos/centos:stream8@sha256:02cbd1a3618827fa94d43fd35c116ce619b98cc79a1788db4913cfb74c3cc3b4 # stream8 for 2024-03-27
     destination: ghcr.io/geonet/base-images/centos:stream8
     auto-update-mutable-tag-digest: true
-  - source: quay.io/centos/centos:stream9@sha256:7d20007bf2a2f0e23bc2049d8b12a84499701ebf1ddbe819a46c785f8f9b9aca # stream9 for 2024-03-27
+  - source: quay.io/centos/centos:stream9@sha256:0f013e7138073c775c8b0188b707342ff67337abdae1ccb050d28e1d00da3920 # stream9 for 2024-04-02
     destination: ghcr.io/geonet/base-images/centos:stream9
     auto-update-mutable-tag-digest: true
   - source: cgr.dev/chainguard/curl:8.1.2@sha256:73992422b3e634c520483bb0aeda22c405d4701ccf5c2294c71d7f67373301cb
@@ -93,8 +93,8 @@ sync:
       issuerRegExp: https://token.actions.githubusercontent.com
       subjectRegExp: https://github.com/chainguard-images/images/.github/workflows/release.yaml@refs/heads/main
     destination: ghcr.io/geonet/base-images/curl:8.1.2
-  - source: docker.io/owasp/zap2docker-stable:2.11.1@sha256:47ba18f36de06f253e655d26ad78945c6dc24404e58f1c0758293a583bb99ce5
-    destination: ghcr.io/geonet/base-images/owasp/zap2docker-stable:2.11.1
+  - source: docker.io/owasp/zap2docker-stable:2.14.0@sha256:3033e8c6fc598b8144c6daa75b634906d56ffe81d297d294bf2a0ad4c2a18d91
+    destination: ghcr.io/geonet/base-images/owasp/zap2docker-stable:2.14.0
   - source: docker.io/koalaman/shellcheck-alpine:v0.9.0@sha256:e19ed93c22423970d56568e171b4512c9244fc75dd9114045016b4a0073ac4b7
     destination: ghcr.io/geonet/base-images/shellcheck:v0.9.0
   - source: docker.io/tonistiigi/binfmt:latest@sha256:66e11bea77a5ea9d6f0fe79b57cd2b189b5d15b93a2bdb925be22949232e4e55