diff --git a/tflib/publisher/check-reproducibility.sh b/tflib/publisher/check-reproducibility.sh
index 2b008f745..9daaab19d 100755
--- a/tflib/publisher/check-reproducibility.sh
+++ b/tflib/publisher/check-reproducibility.sh
@@ -40,7 +40,7 @@ REBUILT_IMAGE_NAME=$(docker run --rm \
    -v ${XDG_CACHE_HOME:-$HOME/.cache}:/cache \
    -e XDG_CACHE_HOME=/cache \
    --entrypoint apko \
-   ghcr.io/wolfi-dev/sdk:latest@sha256:e89c6be599ce3e74c8a830aa7877795ffa3a430c138370bba4961a57bd21639c \
+   ghcr.io/wolfi-dev/sdk:latest@sha256:91b6f2536990b5be900e35d343c08c22b3918123bb69b6d12968d4fd77b34363 \
    publish /tmp/latest.apko.json ${container_name}:5000/reproduction
 )
 
diff --git a/tflib/publisher/providers.tf b/tflib/publisher/providers.tf
index 5fa49cd50..2964e0570 100644
--- a/tflib/publisher/providers.tf
+++ b/tflib/publisher/providers.tf
@@ -6,7 +6,7 @@ terraform {
     }
     apko = {
       source  = "chainguard-dev/apko"
-      version = "0.20.3"
+      version = "0.21.1"
     }
     oci = {
       source  = "chainguard-dev/oci"