diff --git a/Dockerfile b/Dockerfile
index d90e4cc..d1563ac 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,7 +15,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build \
 
 # ddflagd needs neither a shell nor a certificate store: it talks to the local
 # Datadog Agent over plain HTTP or a Unix socket, and serves plain HTTP itself.
-FROM gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3
+FROM gcr.io/distroless/static:nonroot@sha256:d62067879de890a1def9da0e7766b7d20810a5e5555cef8506b752437d7a3e88
 
 COPY --from=builder /ddflagd /ddflagd