diff --git a/services/differ/Dockerfile b/services/differ/Dockerfile
index 029cd8e..50f1d3e 100644
--- a/services/differ/Dockerfile
+++ b/services/differ/Dockerfile
@@ -19,7 +19,7 @@ FROM build AS test
 COPY tests ./tests
 CMD ["cargo", "test", "--all"]
 
-FROM gcr.io/distroless/cc-debian12:nonroot@sha256:bd2899c12b335c827750ccf2359879eab09c09b206023dcebea408947d54127c
+FROM gcr.io/distroless/cc-debian12:nonroot@sha256:b0ae8e989418b458e0f25489bc3be523718938a2b70864cc0f6a00af1ddbd985
 COPY --from=build /differ /app/differ
 # The Connect-RPC server binds 0.0.0.0:$DIFFER_PORT (default 9090).
 EXPOSE 9090