diff --git a/.builder-image-version.txt b/.builder-image-version.txt
index 4e036596..be5b4c7b 100644
--- a/.builder-image-version.txt
+++ b/.builder-image-version.txt
@@ -1 +1 @@
-1.1.19
+1.1.20
diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml
index 3ce2ff3b..5948ca99 100644
--- a/.github/workflows/pr-lint.yml
+++ b/.github/workflows/pr-lint.yml
@@ -21,7 +21,7 @@ jobs:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.19
+      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.20
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.github_token }}
diff --git a/.github/workflows/schedule-scan-image.yml b/.github/workflows/schedule-scan-image.yml
index d41f1fb1..a84565ac 100644
--- a/.github/workflows/schedule-scan-image.yml
+++ b/.github/workflows/schedule-scan-image.yml
@@ -9,7 +9,7 @@ jobs:
     name: Trivy
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.19
+      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.20
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.github_token }}
diff --git a/images/cso/Dockerfile b/images/cso/Dockerfile
index 8a1c2e10..898f468e 100644
--- a/images/cso/Dockerfile
+++ b/images/cso/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM --platform=${BUILDPLATFORM} docker.io/alpine/helm:3.15.1 as helm
+FROM --platform=${BUILDPLATFORM} docker.io/alpine/helm:3.15.3 as helm
 
 # Build the manager binary
 FROM --platform=${BUILDPLATFORM} docker.io/library/golang:1.21.6-bullseye as build
@@ -25,7 +25,7 @@ RUN --mount=type=cache,target=/root/.cache --mount=type=cache,target=/go/pkg \
     go build -mod=vendor -ldflags "${LDFLAGS} -extldflags '-static'" \
     -o manager cmd/main.go
 
-FROM --platform=${BUILDPLATFORM} docker.io/library/alpine:3.20.0
+FROM --platform=${BUILDPLATFORM} docker.io/library/alpine:3.20.2
 WORKDIR /
 COPY --from=build /src/cluster-stack-operator/manager .
 COPY --from=helm --chown=root:root --chmod=755 /usr/bin/helm /usr/local/bin/helm