diff --git a/Dockerfile b/Dockerfile
index d1563ac..36bb3f5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,7 +15,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build \
 
 # ddflagd needs neither a shell nor a certificate store: it talks to the local
 # Datadog Agent over plain HTTP or a Unix socket, and serves plain HTTP itself.
-FROM gcr.io/distroless/static:nonroot@sha256:d62067879de890a1def9da0e7766b7d20810a5e5555cef8506b752437d7a3e88
+FROM gcr.io/distroless/static:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
 
 COPY --from=builder /ddflagd /ddflagd