diff --git a/action.yml b/action.yml
index 2108324..8cb888a 100644
--- a/action.yml
+++ b/action.yml
@@ -20,7 +20,7 @@ runs:
   # By digest, pinned at bootstrap and moved by a reviewed commit. A tag here
   # would let whoever can push to `ci` run code in every pipeline in the
   # cluster, holding that pipeline's deploy credential.
-  image: docker://git.512.dev/ci/toolbox@sha256:4d682cf416d2d6356b5a37bf6e5dfa559bac2001dd3ced67843d2d405baec4ac
+  image: docker://git.512.dev/ci/toolbox@sha256:955990e173d8bd3e642d75c2ff2f5ed990f2976e8efbced2d4cf50751a319fa5
 
   entrypoint: /usr/local/lib/actions/deploy-platform.sh
   env: