diff --git a/cli/Dockerfile b/cli/Dockerfile
index 82f4bfe8..004f7525 100644
--- a/cli/Dockerfile
+++ b/cli/Dockerfile
@@ -19,7 +19,7 @@ RUN if [ "$BUILDARCH" != "$TARGETARCH" ] && [ "$TARGETARCH" = "arm64" ] ; \
         cargo build --release --no-default-features --features rustls-webpki ; \
     fi
 
-FROM --platform=$TARGETPLATFORM gcr.io/distroless/cc-debian11
+FROM --platform=$TARGETPLATFORM gcr.io/distroless/cc-debian12
 COPY --from=builder /oxigraph/target/release/oxigraph /usr/local/bin/oxigraph
 ENTRYPOINT [ "/usr/local/bin/oxigraph" ]
 CMD [ "serve", "--location", "/data", "--bind", "0.0.0.0:7878" ]