diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 88e2938..9e62fc6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -134,7 +134,7 @@ jobs:
       - name: Build secureblue
         uses: blue-build/github-action@33ee8cc4011b0d47666ea7026d08bb5b941ac90c # v1.7.0
         with:          
-          cli_version: v0.8.20
+          cli_version: v0.8.25
           recipe: ${{ matrix.recipe }}
           cosign_private_key: ${{ secrets.SIGNING_SECRET }}
           registry_token: ${{ github.token }}
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index dcce611..572f9f1 100644
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -45,7 +45,7 @@ jobs:
         run: |
           docker create \
             --name blue-build-installer \
-            ghcr.io/blue-build/cli:v0.8.20-installer
+            ghcr.io/blue-build/cli:v0.8.25-installer
           docker cp blue-build-installer:/out/bluebuild /usr/local/bin/bluebuild
           docker rm blue-build-installer
           bluebuild --version