diff --git a/microservices/services/audit/Dockerfile b/microservices/services/audit/Dockerfile
index fb89e60..2e4b644 100644
--- a/microservices/services/audit/Dockerfile
+++ b/microservices/services/audit/Dockerfile
@@ -17,7 +17,7 @@ RUN go build -trimpath -o main ./cmd/main.go
 
 # Run the audit-service on a pinned Alpine image as an unprivileged user.
 # Configuration is environment-only; migrations are owned by the monolith.
-FROM alpine:3.20
+FROM alpine:3.24
 
 WORKDIR /app
 
diff --git a/microservices/services/auth/Dockerfile b/microservices/services/auth/Dockerfile
index 0b72a0f..ce8b40b 100644
--- a/microservices/services/auth/Dockerfile
+++ b/microservices/services/auth/Dockerfile
@@ -17,7 +17,7 @@ RUN go build -trimpath -o main ./cmd/main.go
 
 # Run the auth-service on a pinned Alpine image as an unprivileged user.
 # Configuration is environment-only; migrations are owned by the monolith.
-FROM alpine:3.20
+FROM alpine:3.24
 
 WORKDIR /app
 
diff --git a/microservices/services/bpm/Dockerfile b/microservices/services/bpm/Dockerfile
index 161f6f6..787c85a 100644
--- a/microservices/services/bpm/Dockerfile
+++ b/microservices/services/bpm/Dockerfile
@@ -7,7 +7,7 @@ RUN go mod download && go mod tidy
 COPY . .
 RUN go build -trimpath -o main ./cmd/main.go
 
-FROM alpine:3.20
+FROM alpine:3.24
 WORKDIR /app
 RUN apk add --no-cache tzdata wget \
     && addgroup -S app && adduser -S app -G app \
diff --git a/microservices/services/file/Dockerfile b/microservices/services/file/Dockerfile
index d859663..93bddcf 100644
--- a/microservices/services/file/Dockerfile
+++ b/microservices/services/file/Dockerfile
@@ -17,7 +17,7 @@ RUN go build -trimpath -o main ./cmd/main.go
 
 # Run the file-service on a pinned Alpine image as an unprivileged user.
 # Configuration is environment-only; migrations are owned by the monolith.
-FROM alpine:3.20
+FROM alpine:3.24
 
 WORKDIR /app
 
diff --git a/microservices/services/identity/Dockerfile b/microservices/services/identity/Dockerfile
index 32e78e6..470615b 100644
--- a/microservices/services/identity/Dockerfile
+++ b/microservices/services/identity/Dockerfile
@@ -17,7 +17,7 @@ RUN go build -trimpath -o main ./cmd/main.go
 
 # Run the identity-service on a pinned Alpine image as an unprivileged user.
 # Configuration is environment-only; migrations are owned by the monolith.
-FROM alpine:3.20
+FROM alpine:3.24
 
 WORKDIR /app
 
diff --git a/microservices/services/monitor/Dockerfile b/microservices/services/monitor/Dockerfile
index 8169566..79ebd61 100644
--- a/microservices/services/monitor/Dockerfile
+++ b/microservices/services/monitor/Dockerfile
@@ -15,7 +15,7 @@ RUN go build -trimpath -o main ./cmd/main.go \
     && go build -trimpath -o migrate ./cmd/migrate
 
 # Run the backend on a pinned Alpine image as an unprivileged user.
-FROM alpine:3.20
+FROM alpine:3.24
 
 WORKDIR /app
 
diff --git a/microservices/services/system/Dockerfile b/microservices/services/system/Dockerfile
index 26537e6..a6a419b 100644
--- a/microservices/services/system/Dockerfile
+++ b/microservices/services/system/Dockerfile
@@ -24,7 +24,7 @@ COPY services/monitor/migrations/ /repository-snapshot/microservices/services/mo
 
 # Run the system-service on a pinned Alpine image as an unprivileged user.
 # Configuration is environment-only; migrations are owned by the monolith.
-FROM alpine:3.20
+FROM alpine:3.24
 
 WORKDIR /app