diff --git a/.ko.yaml b/.ko.yaml
index 9efc21adb..9c28d4a10 100644
--- a/.ko.yaml
+++ b/.ko.yaml
@@ -1,7 +1,7 @@
 ---
 defaultBaseImage: gcr.io/distroless/static-debian12:nonroot
 baseImageOverrides:
-  github.com/sigstore/scaffolding/cmd/cloudsqlproxy: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.7.2-alpine
+  github.com/sigstore/scaffolding/cmd/cloudsqlproxy: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.8.0-alpine
 
 builds:
   - id: ctlog-createctconfig
diff --git a/Dockerfile.deps b/Dockerfile.deps
index 6a27ead15..810d92092 100644
--- a/Dockerfile.deps
+++ b/Dockerfile.deps
@@ -1,4 +1,4 @@
 # This Dockerfile simply serves as a trigger for dependabot to notify when a new upstream release of a component is available
 # If dependabot proposes an update to the container listed below, you should also update the value listed in '.ko.yaml' and cut a new release of scaffolding
-FROM gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.7.2-alpine as cloud-sql-proxy
+FROM gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.8.0-alpine as cloud-sql-proxy
 ENV FOO=BAR