diff --git a/go.mod b/go.mod
index 89e1fc665..32f64fa9a 100644
--- a/go.mod
+++ b/go.mod
@@ -51,7 +51,7 @@ require (
 )
 
 // use forked version until we can get the fixes merged see https://github.com/enterprise-contract/go-containerregistry/blob/main/hack/ec-patches.sh for a list of patches we carry
-replace github.com/google/go-containerregistry => github.com/enterprise-contract/go-containerregistry v0.20.3-0.20241007145100-b55a3c374bf0
+replace github.com/google/go-containerregistry => github.com/enterprise-contract/go-containerregistry v0.20.3-0.20241021143850-a9c1a63046bc
 
 require (
 	cloud.google.com/go v0.115.1 // indirect
diff --git a/go.sum b/go.sum
index 1222969ae..c074b4744 100644
--- a/go.sum
+++ b/go.sum
@@ -545,8 +545,8 @@ github.com/emirpasic/gods v1.18.1 h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc
 github.com/emirpasic/gods v1.18.1/go.mod h1:8tpGGwCnJ5H4r6BWwaV6OrWmMoPhUl5jm/FMNAnJvWQ=
 github.com/enterprise-contract/enterprise-contract-controller/api v0.1.60 h1:5gfGknt2BEn5f6RtaPVVWzGhMDoJNo2TuOG/fUbpDOE=
 github.com/enterprise-contract/enterprise-contract-controller/api v0.1.60/go.mod h1:R1eRwHUjcYWg4gJnv/zpEDog60J9wBqe2TIjlYFRUe8=
-github.com/enterprise-contract/go-containerregistry v0.20.3-0.20241007145100-b55a3c374bf0 h1:NOJl3xiAa+oJjgiBxAm190oLv/3+4TbRekwyT64Rqn4=
-github.com/enterprise-contract/go-containerregistry v0.20.3-0.20241007145100-b55a3c374bf0/go.mod h1:z38EKdKh4h7IP2gSfUUqEvalZBqs6AoLeWfUy34nQC8=
+github.com/enterprise-contract/go-containerregistry v0.20.3-0.20241021143850-a9c1a63046bc h1:zdaYgLp9LN9Aga77qcmt911rhmdm9DDsSWGobOFq/+I=
+github.com/enterprise-contract/go-containerregistry v0.20.3-0.20241021143850-a9c1a63046bc/go.mod h1:QTzGuUYojyBy1anZvBPMhwXRE0LGZPIcpmn3K8DHYrw=
 github.com/enterprise-contract/go-gather v0.0.4 h1:ecQsWuNyPi59wkySm1JXIXIUp+Pta9ECl3PmhcV6Llc=
 github.com/enterprise-contract/go-gather v0.0.4/go.mod h1:bWsDHJZRpdPoIwPQevpDiD4VF6fydTWZ0ocL2MmI6TE=
 github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=