diff --git a/porch/func/Dockerfile b/porch/func/Dockerfile
index 50c99fc2c5..6371c34006 100644
--- a/porch/func/Dockerfile
+++ b/porch/func/Dockerfile
@@ -25,7 +25,7 @@ FROM gcr.io/kpt-fn/set-project-id:v0.2.0 as set-project-id
 FROM gcr.io/kpt-fn/starlark:v0.3.0 as starlark
 FROM gcr.io/kpt-fn/upsert-resource:v0.2.0 as upsert-resource
 
-FROM golang:1.20.6-alpine3.18 as builder
+FROM golang:1.20.7-alpine3.18 as builder
 WORKDIR /go/src/github.com/GoogleContainerTools/kpt
 
 RUN go install github.com/grpc-ecosystem/grpc-health-probe@v0.4.11
@@ -43,7 +43,7 @@ COPY porch/func/ porch/func/
 RUN cd porch/func ; go build -v -o /server ./server
 COPY porch/func/config.yaml /config.yaml
 
-FROM alpine:3.15
+FROM alpine:3.18
 
 COPY --from=apply-setters          /usr/local/bin/function /functions/apply-setters
 COPY --from=apply-setters-v1       /usr/local/bin/function /functions/apply-setters-v1
diff --git a/porch/func/Dockerfile-wrapperserver b/porch/func/Dockerfile-wrapperserver
index a6c38cdcd8..307528ee7a 100644
--- a/porch/func/Dockerfile-wrapperserver
+++ b/porch/func/Dockerfile-wrapperserver
@@ -1,4 +1,4 @@
-FROM golang:1.20.6-alpine3.18 as builder
+FROM golang:1.20.7-alpine3.18 as builder
 
 WORKDIR /go/src/github.com/GoogleContainerTools/kpt
 
@@ -14,6 +14,6 @@ COPY porch/func/ porch/func/
 RUN cd porch/func ; go build -v -o /wrapper-server/wrapper-server ./wrapper-server
 RUN cp $GOPATH/bin/grpc-health-probe /wrapper-server/
 
-FROM alpine:3.15
+FROM alpine:3.18
 
 COPY --from=builder /wrapper-server/* /wrapper-server/
diff --git a/release/images/Dockerfile b/release/images/Dockerfile
index 794855306e..ccff88fd23 100644
--- a/release/images/Dockerfile
+++ b/release/images/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM alpine:3.13
+FROM alpine:3.18
 RUN apk update && apk upgrade && \
     apk add --no-cache git less mandoc diffutils bash openssh docker-cli && \
     rm -rf /var/lib/apt/lists/* && \