diff --git a/apps/prod/tekton/configs/tasks/aws-cli.yaml b/apps/prod/tekton/configs/tasks/aws-cli.yaml
index 8347f5e6f..23ecd1b56 100644
--- a/apps/prod/tekton/configs/tasks/aws-cli.yaml
+++ b/apps/prod/tekton/configs/tasks/aws-cli.yaml
@@ -31,7 +31,7 @@ spec:
       default: ["help"]
   steps:
     - name: awscli
-      image: docker.io/amazon/aws-cli:2.17.30
+      image: docker.io/amazon/aws-cli:2.17.36
       script: "$(params.SCRIPT)"
       args:
         - "$(params.ARGS)"
diff --git a/apps/prod/tekton/configs/tasks/pingcap-upload-offline-packages.yaml b/apps/prod/tekton/configs/tasks/pingcap-upload-offline-packages.yaml
index fe69244ef..e06f1bf87 100644
--- a/apps/prod/tekton/configs/tasks/pingcap-upload-offline-packages.yaml
+++ b/apps/prod/tekton/configs/tasks/pingcap-upload-offline-packages.yaml
@@ -80,7 +80,7 @@ spec:
         echo "✅ Uploaded for ${tag} ."
 
     - name: upload-dm-tarballs-to-s3
-      image: docker.io/amazon/aws-cli:2.17.30
+      image: docker.io/amazon/aws-cli:2.17.36
       workingDir: /workspace
       script: |
         #!/usr/bin/env bash