diff --git a/config/fulcio/fulcio/300-fulcio.yaml b/config/fulcio/fulcio/300-fulcio.yaml
index e7cc71ade..691768d14 100644
--- a/config/fulcio/fulcio/300-fulcio.yaml
+++ b/config/fulcio/fulcio/300-fulcio.yaml
@@ -20,7 +20,7 @@ spec:
       # This doesn't actually use Kubernetes credentials, so don't mount them in.
       automountServiceAccountToken: false
       containers:
-      - image: gcr.io/projectsigstore/fulcio@sha256:81e1e0c4634a8116286406c980577f1c3456f0052b35bf4c4645255d69387297 # v1.3.4
+      - image: gcr.io/projectsigstore/fulcio:v1.4.0@sha256:d70af39e2e0a33817c6a8d1a843d3a8c6c851364e3b93535c6d10316cff85a55
         name: fulcio
         ports:
         - containerPort: 5555
@@ -90,7 +90,7 @@ spec:
       # This doesn't actually use Kubernetes credentials, so don't mount them in.
       automountServiceAccountToken: false
       containers:
-      - image: gcr.io/projectsigstore/fulcio@sha256:27c6e4fe64a72a537c133452d9c8e0518944d1d69aeee5e7ef8a9fbe70b8b5d3 # v1.0.0
+      - image: gcr.io/projectsigstore/fulcio:v1.4.0@sha256:d70af39e2e0a33817c6a8d1a843d3a8c6c851364e3b93535c6d10316cff85a55
         name: fulcio-grpc
         ports:
         - containerPort: 5554
diff --git a/config/rekor/rekor/300-rekor.yaml b/config/rekor/rekor/300-rekor.yaml
index def9d9b6d..164f855c2 100644
--- a/config/rekor/rekor/300-rekor.yaml
+++ b/config/rekor/rekor/300-rekor.yaml
@@ -19,7 +19,7 @@ spec:
       serviceAccountName: rekor
       containers:
       - name: rekor
-        image: gcr.io/projectsigstore/rekor-server@sha256:23213617ad2b63305064b2a2be0ffe8038c2dc9c4f69b22ffe85ed83f65f54c7 # v1.2.2
+        image: gcr.io/projectsigstore/rekor-server:v1.3.0@sha256:1cf8618112dd67113a49c93f717488e45c5fc765eb03484870123404d9e9f00c
         ports:
         - containerPort: 3000
         args: [