diff --git a/docker/Dockerfile.hsm b/docker/Dockerfile.hsm
index c5a54d8c..f6cec47a 100644
--- a/docker/Dockerfile.hsm
+++ b/docker/Dockerfile.hsm
@@ -1,4 +1,4 @@
-FROM golang AS builder
+FROM golang:bookworm AS builder
 
 WORKDIR /src
 COPY . .
@@ -9,9 +9,9 @@ RUN apt-get install -y --no-install-recommends \
 RUN make V=1 GO_ENVS="CGO_ENABLED=1" bin/step-ca
 RUN setcap CAP_NET_BIND_SERVICE=+eip bin/step-ca
 
-FROM smallstep/step-kms-plugin:bullseye AS kms
+FROM smallstep/step-kms-plugin:bookworm AS kms
 
-FROM smallstep/step-cli:bullseye
+FROM smallstep/step-cli:bookworm
 
 COPY --from=builder /src/bin/step-ca /usr/local/bin/step-ca
 COPY --from=kms /usr/local/bin/step-kms-plugin /usr/local/bin/step-kms-plugin