diff --git a/.github/workflows/ci-master-pr.yml b/.github/workflows/ci-master-pr.yml
index 3fc2925..c4b000c 100644
--- a/.github/workflows/ci-master-pr.yml
+++ b/.github/workflows/ci-master-pr.yml
@@ -108,7 +108,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.30.3
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-30-3.outputs.REF_VARIANT }}
@@ -122,7 +122,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.30.3
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-30-3.outputs.REF_VARIANT }}
@@ -135,7 +135,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.30.3
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-30-3.outputs.VARIANT }}
@@ -176,7 +176,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.30.3-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-30-3-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -190,7 +190,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.30.3-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-30-3-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -203,7 +203,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.30.3-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-30-3-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -295,7 +295,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.29.7
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-29-7.outputs.REF_VARIANT }}
@@ -309,7 +309,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.29.7
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-29-7.outputs.REF_VARIANT }}
@@ -322,7 +322,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.29.7
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-29-7.outputs.VARIANT }}
@@ -362,7 +362,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.29.7-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-29-7-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -376,7 +376,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.29.7-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-29-7-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -389,7 +389,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.29.7-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-29-7-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -481,7 +481,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.28.12
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-28-12.outputs.REF_VARIANT }}
@@ -495,7 +495,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.28.12
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-28-12.outputs.REF_VARIANT }}
@@ -508,7 +508,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.28.12
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-28-12.outputs.VARIANT }}
@@ -548,7 +548,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.28.12-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-28-12-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -562,7 +562,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.28.12-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-28-12-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -575,7 +575,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.28.12-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-28-12-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -667,7 +667,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.27.16
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-27-16.outputs.REF_VARIANT }}
@@ -681,7 +681,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.27.16
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-27-16.outputs.REF_VARIANT }}
@@ -694,7 +694,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.27.16
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-27-16.outputs.VARIANT }}
@@ -734,7 +734,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.27.16-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-27-16-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -748,7 +748,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.27.16-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-27-16-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -761,7 +761,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.27.16-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-27-16-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -853,7 +853,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.26.15
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-26-15.outputs.REF_VARIANT }}
@@ -867,7 +867,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.26.15
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-26-15.outputs.REF_VARIANT }}
@@ -880,7 +880,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.26.15
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-26-15.outputs.VARIANT }}
@@ -920,7 +920,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.26.15-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-26-15-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -934,7 +934,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.26.15-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-26-15-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -947,7 +947,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.26.15-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-26-15-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -1039,7 +1039,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.25.16
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-25-16.outputs.REF_VARIANT }}
@@ -1053,7 +1053,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.25.16
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-25-16.outputs.REF_VARIANT }}
@@ -1066,7 +1066,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.25.16
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-25-16.outputs.VARIANT }}
@@ -1106,7 +1106,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.25.16-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-25-16-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -1120,7 +1120,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.25.16-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-25-16-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -1133,7 +1133,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.25.16-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-25-16-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -1225,7 +1225,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.24.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-24-17.outputs.REF_VARIANT }}
@@ -1239,7 +1239,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.24.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-24-17.outputs.REF_VARIANT }}
@@ -1252,7 +1252,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.24.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-24-17.outputs.VARIANT }}
@@ -1292,7 +1292,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.24.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-24-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -1306,7 +1306,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.24.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-24-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -1319,7 +1319,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.24.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-24-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -1411,7 +1411,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.23.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-23-17.outputs.REF_VARIANT }}
@@ -1425,7 +1425,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.23.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-23-17.outputs.REF_VARIANT }}
@@ -1438,7 +1438,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.23.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-23-17.outputs.VARIANT }}
@@ -1478,7 +1478,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.23.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-23-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -1492,7 +1492,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.23.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-23-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -1505,7 +1505,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.23.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-23-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -1597,7 +1597,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.22.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-22-17.outputs.REF_VARIANT }}
@@ -1611,7 +1611,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.22.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-22-17.outputs.REF_VARIANT }}
@@ -1624,7 +1624,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.22.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-22-17.outputs.VARIANT }}
@@ -1664,7 +1664,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.22.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-22-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -1678,7 +1678,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.22.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-22-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -1691,7 +1691,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.22.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-22-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -1783,7 +1783,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.21.14
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-21-14.outputs.REF_VARIANT }}
@@ -1797,7 +1797,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.21.14
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-21-14.outputs.REF_VARIANT }}
@@ -1810,7 +1810,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.21.14
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-21-14.outputs.VARIANT }}
@@ -1850,7 +1850,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.21.14-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-21-14-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -1864,7 +1864,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.21.14-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-21-14-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -1877,7 +1877,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.21.14-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-21-14-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -1969,7 +1969,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.20.15
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-20-15.outputs.REF_VARIANT }}
@@ -1983,7 +1983,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.20.15
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-20-15.outputs.REF_VARIANT }}
@@ -1996,7 +1996,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.20.15
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-20-15.outputs.VARIANT }}
@@ -2036,7 +2036,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.20.15-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-20-15-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2050,7 +2050,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.20.15-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-20-15-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2063,7 +2063,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.20.15-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-20-15-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -2155,7 +2155,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.19.16
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-19-16.outputs.REF_VARIANT }}
@@ -2169,7 +2169,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.19.16
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-19-16.outputs.REF_VARIANT }}
@@ -2182,7 +2182,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.19.16
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-19-16.outputs.VARIANT }}
@@ -2222,7 +2222,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.19.16-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-19-16-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2236,7 +2236,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.19.16-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-19-16-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2249,7 +2249,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.19.16-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-19-16-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -2341,7 +2341,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.18.20
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-18-20.outputs.REF_VARIANT }}
@@ -2355,7 +2355,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.18.20
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-18-20.outputs.REF_VARIANT }}
@@ -2368,7 +2368,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.18.20
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-18-20.outputs.VARIANT }}
@@ -2408,7 +2408,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.18.20-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-18-20-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2422,7 +2422,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.18.20-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-18-20-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2435,7 +2435,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.18.20-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-18-20-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -2527,7 +2527,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.17.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-17-17.outputs.REF_VARIANT }}
@@ -2541,7 +2541,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.17.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-17-17.outputs.REF_VARIANT }}
@@ -2554,7 +2554,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.17.17
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-17-17.outputs.VARIANT }}
@@ -2594,7 +2594,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.17.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-17-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2608,7 +2608,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.17.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-17-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2621,7 +2621,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.17.17-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-17-17-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -2713,7 +2713,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.16.15
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-16-15.outputs.REF_VARIANT }}
@@ -2727,7 +2727,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.16.15
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-16-15.outputs.REF_VARIANT }}
@@ -2740,7 +2740,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.16.15
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-16-15.outputs.VARIANT }}
@@ -2780,7 +2780,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.16.15-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-16-15-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2794,7 +2794,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.16.15-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-16-15-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2807,7 +2807,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.16.15-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-16-15-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -2899,7 +2899,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.15.12
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-15-12.outputs.REF_VARIANT }}
@@ -2913,7 +2913,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.15.12
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-15-12.outputs.REF_VARIANT }}
@@ -2926,7 +2926,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.15.12
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-15-12.outputs.VARIANT }}
@@ -2966,7 +2966,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.15.12-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-15-12-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2980,7 +2980,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.15.12-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-15-12-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -2993,7 +2993,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.15.12-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-15-12-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
@@ -3085,7 +3085,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.14.10
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-14-10.outputs.REF_VARIANT }}
@@ -3099,7 +3099,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.14.10
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-14-10.outputs.REF_VARIANT }}
@@ -3112,7 +3112,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.14.10
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-14-10.outputs.VARIANT }}
@@ -3152,7 +3152,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.14.10-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: false
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-14-10-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -3166,7 +3166,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.14.10-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-14-10-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.REF_VARIANT }}
@@ -3179,7 +3179,7 @@ jobs:
       uses: docker/build-push-action@v5
       with:
         context: variants/1.14.10-envsubst-git-jq-kustomize-sops-ssh-yq
-        platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
+        platforms: linux/386,linux/amd64,linux/arm64
         push: true
         tags: |
           ${{ github.repository }}:${{ steps.prep-1-14-10-envsubst-git-jq-kustomize-sops-ssh-yq.outputs.VARIANT }}
diff --git a/generate/definitions/VARIANTS.ps1 b/generate/definitions/VARIANTS.ps1
index b73bdcb..e2b28e2 100755
--- a/generate/definitions/VARIANTS.ps1
+++ b/generate/definitions/VARIANTS.ps1
@@ -23,7 +23,7 @@ $VARIANTS = @(
                     package_version = $variant['package_version']
                     distro = $variant['distro']
                     distro_version = $variant['distro_version']
-                    platforms =  'linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x'
+                    platforms =  'linux/386,linux/amd64,linux/arm64'
                     components = $subVariant['components']
                     job_group_key = $variant['package_version']
                 }
diff --git a/generate/functions/Checksums.ps1 b/generate/functions/Checksums.ps1
new file mode 100644
index 0000000..7a089c2
--- /dev/null
+++ b/generate/functions/Checksums.ps1
@@ -0,0 +1,25 @@
+# Global cache for checksums
+function Set-Checksums($k, $url) {
+    $global:CHECKSUMS = if (Get-Variable -Scope Global -Name CHECKSUMS -ErrorAction SilentlyContinue) { $global:CHECKSUMS } else { @{} }
+    $global:CHECKSUMS[$k] = if ($global:CHECKSUMS[$k]) { $global:CHECKSUMS[$k] } else {
+        $r = Invoke-WebRequest $url
+        $c = if ($r.headers['Content-Type'] -eq 'text/plain') { $r.Content } else { [System.Text.Encoding]::UTF8.GetString($r.Content) }
+        $c -split "`n"
+    }
+}
+function Get-ChecksumsFile ($k, $keyword) {
+    $file = $global:CHECKSUMS[$k] | ? { $_ -match $keyword } | % { $_ -split "\s" } | Select-Object -Last 1 | % { $_.TrimStart('*') }
+    if ($file) {
+        $file
+    }else {
+        "No file among $k checksums matching regex: $keyword" | Write-Warning
+    }
+}
+function Get-ChecksumsSha ($k, $keyword) {
+    $sha = $global:CHECKSUMS[$k] | ? { $_ -match $keyword } | % { $_ -split "\s" } | Select-Object -First 1
+    if ($sha) {
+        $sha
+    }else {
+        "No sha among $k checksums matching regex: $keyword" | Write-Warning
+    }
+}
diff --git a/generate/functions/Generate-DownloadBinary.ps1 b/generate/functions/Generate-DownloadBinary.ps1
new file mode 100644
index 0000000..481e2b9
--- /dev/null
+++ b/generate/functions/Generate-DownloadBinary.ps1
@@ -0,0 +1,173 @@
+# Version 0.1.0
+function Generate-DownloadBinary ($o) {
+    Set-StrictMode -Version Latest
+
+    $checksumsKey = "$( $o['binary'] )-$( $o['version'] )"
+    $files = [ordered]@{}
+    if ($o['checksumsUrl']) {
+        Set-Checksums $checksumsKey  $o['checksumsUrl']
+    }else {
+        $release = Invoke-RestMethod "https://api.github.com/repos/$( $o['repository'] )/releases/tags/$( $o['version'] )"
+        $releaseAssetsFiles = $release.assets | ? { $_.name -match [regex]::Escape($o['binary']) -and $_.name -notmatch '\.sha\d+$' }
+        foreach ($f in $releaseAssetsFiles ) {
+            $sha = & {
+                $shaF = $release.assets | ? { $_.name -eq "$( $f.name ).sha256" -or $_ -eq "$( $f.name ).sha512" }
+                $r = Invoke-WebRequest $shaF.browser_download_url
+                $c = if ($r.headers['Content-Type'] -eq 'text/plain') { $r.Content } else { [System.Text.Encoding]::UTF8.GetString($r.Content) }
+                $c = $c.Trim() -replace '^([a-fA-F0-9]+) .+', '$1' # The checksum is the first column
+                $c
+            }
+            $files[$f.name] = $sha
+        }
+    }
+    $shellVariable = "$( $o['binary'].ToUpper() -replace '[^A-Za-z0-9_]', '_' )_VERSION"
+@"
+# Install $( $o['binary'] )
+RUN set -eux; \
+    $shellVariable=$( $o['version'] ); \
+    case "`$( uname -m )" in \
+
+"@
+
+    $o['architectures'] = if ($o.Contains('architectures')) { $o['architectures'] } else { 'linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/ppc64le,linux/riscv64,linux/s390x' }
+    foreach ($a in ($o['architectures'] -split ',') ) {
+        $split = $a -split '/'
+        $os = $split[0]  # E.g. 'linux'
+        $arch = $split[1]  # E.g. 'amd64'
+        $archv = if ($split.Count -gt 2) { $split[2] } else { '' } # E.g. 'v6' or ''
+        switch ($a) {
+            "$os/386" {
+                $hardware = 'x86'
+                $regex = "$os[-_.](i?$arch|x86(_64)?)[-_.]?$archv$( [regex]::Escape($o['archiveformat']) )$|(i?$arch|x86(_64)?)[-_.]?$archv.*?[-_.]$os.*?$( [regex]::Escape($o['archiveformat']) )$"
+            }
+            "$os/amd64" {
+                $hardware = 'x86_64'
+                $regex = "$os[-_.]($arch|x86(_64)?)[-_.]?$archv$( [regex]::Escape($o['archiveformat']) )$|($arch|x86(_64)?)[-_.]?$archv.*?[-_.]$os.*?$( [regex]::Escape($o['archiveformat']) )$"
+            }
+            "$os/arm/v6" {
+                $hardware = 'armhf'
+                $regex = "$os[-_.]($arch|arm)[-_.]?($archv)?$( [regex]::Escape($o['archiveformat']) )$|($arch|arm)[-_.]?($archv)?.*?[-_.]$os.*?$( [regex]::Escape($o['archiveformat']) )$"
+            }
+            "$os/arm/v7" {
+                $hardware = 'armv7l'
+                $regex = "$os[-_.]($arch|arm)[-_.]?($archv)?$( [regex]::Escape($o['archiveformat']) )$|($arch|arm)[-_.]?($archv)?.*?[-_.]$os.*?$( [regex]::Escape($o['archiveformat']) )$"
+            }
+            "$os/arm64" {
+                $hardware = 'aarch64'
+                $regex = "$os[-_.]($arch|aarch64)[-_.]?$archv$( [regex]::Escape($o['archiveformat']) )$|($arch|aarch64)[-_.]?$archv.*?[-_.]$os.*?$( [regex]::Escape($o['archiveformat']) )$"
+            }
+            "$os/ppc64le" {
+                $hardware = 'ppc64le'
+                $regex = "$os[-_.]$arch[-_.]?$archv$( [regex]::Escape($o['archiveformat']) )$|$arch[-_.]?$archv.*?[-_.]$os.*?$( [regex]::Escape($o['archiveformat']) )$"
+            }
+            "$os/riscv64" {
+                $hardware = 'riscv64'
+                $regex = "$os[-_.]$arch[-_.]?$archv$( [regex]::Escape($o['archiveformat']) )$|$arch[-_.]?$archv.*?[-_.]$os.*?$( [regex]::Escape($o['archiveformat']) )$"
+            }
+            "$os/s390x" {
+                $hardware = 's390x'
+                $regex = "$os[-_.]$arch[-_.]?$archv$( [regex]::Escape($o['archiveformat']) )$|$arch[-_.]?$archv.*?[-_.]$os.*?$( [regex]::Escape($o['archiveformat']) )$"
+            }
+            default {
+                throw "Unsupported architecture: $a"
+            }
+        }
+
+        $file = $sha = $url = ''
+        if ($o['checksumsUrl']) {
+            $file = Get-ChecksumsFile $checksumsKey $regex
+            $sha = Get-ChecksumsSha $checksumsKey $regex
+            $url = Split-Path $o['checksumsUrl'] -Parent
+        } else {
+            $file = $files.Keys | ? { $_ -match $regex } | Select-Object -First 1
+            if ($file) {
+                $url = "https://github.com/$( $o['repository'] )/releases/download/$( $o['version'] )"
+                $sha = $files[$file]
+            }else {
+                throw "No file matched regex: $regex"
+            }
+        }
+        if ($file -and $sha) {
+@"
+        '$hardware') \
+            URL="$url/$file"; \
+            SHA256=$sha; \
+            ;; \
+
+"@
+        }
+    }
+
+@"
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+
+"@
+
+@"
+    FILE=$( $o['binary'] )$( $o['archiveformat'] ); \
+    wget -q "`$URL" -O "`$FILE"; \
+    echo "`$SHA256  `$FILE" | sha256sum -c -; \
+
+"@
+
+    if ($o['archiveformat'] -match '\.tar\.gz|\.tgz') {
+        if ($o['archivefiles'].Count -gt 0) {
+@"
+    tar -xvf "`$FILE" --no-same-owner --no-same-permissions -- $( $o['archivefiles'] -join ' ' ); \
+    rm -f "`$FILE"; \
+
+"@
+        }else {
+@"
+    tar -xvf "`$FILE" --no-same-owner --no-same-permissions; \
+    rm -f "`$FILE"; \
+
+"@
+        }
+    }elseif ($o['archiveformat'] -match '\.bz2') {
+@"
+    bzip2 -d "`$FILE"; \
+
+"@
+    }elseif ($o['archiveformat'] -match '\.gz') {
+@"
+    gzip -d "`$FILE"; \
+
+"@
+    }elseif ($o['archiveformat'] -match '\.zip') {
+@"
+    unzip "`$FILE" $( $o['binary'] ); \
+
+"@
+    }
+
+    $destination = if ($o.Contains('destination')) { $o['destination'] } else { "/usr/local/bin/$( $o['binary'] )" }
+    $destinationDir = Split-Path $destination -Parent
+@"
+    mkdir -pv $destinationDir; \
+    mv -v $( $o['binary'] ) $destination; \
+    chmod +x $destination; \
+    $( $o['testCommand'] ); \
+
+"@
+
+    if ($o.Contains('archivefiles')) {
+        if ($license = $o['archivefiles'] | ? { $_ -match 'LICENSE' }) {
+@"
+    mkdir -p /licenses; \
+    mv -v $license /licenses/$license; \
+
+"@
+        }
+    }
+
+@"
+    :
+
+
+"@
+}
diff --git a/generate/templates/Dockerfile.ps1 b/generate/templates/Dockerfile.ps1
index 9f26f7f..6fe907e 100755
--- a/generate/templates/Dockerfile.ps1
+++ b/generate/templates/Dockerfile.ps1
@@ -75,13 +75,16 @@ RUN apk add --no-cache curl \
         }
 
         'sops' {
+            $SOPS_VERSION = 'v3.9.0'
+            Generate-DownloadBinary @{
+                binary = 'sops'
+                version = $SOPS_VERSION
+                checksumsUrl = "https://github.com/getsops/sops/releases/download/$SOPS_VERSION/sops-$SOPS_VERSION.checksums.txt"
+                archiveformat = ''
+                testCommand = 'sops --version'
+            }
 
             @"
-RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
-    chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.14.10-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.14.10-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index d5959a6..e4c9282 100644
--- a/variants/1.14.10-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.14.10-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.15.12-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.15.12-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 3ac0ed0..7e06809 100644
--- a/variants/1.15.12-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.15.12-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.16.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.16.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index ec87992..c2ed2de 100644
--- a/variants/1.16.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.16.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.17.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.17.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 5012230..a91f13e 100644
--- a/variants/1.17.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.17.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.18.20-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.18.20-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index a7b7518..7c8c680 100644
--- a/variants/1.18.20-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.18.20-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.19.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.19.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 8f4453d..55d95b0 100644
--- a/variants/1.19.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.19.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.20.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.20.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 621762b..4d9fd1b 100644
--- a/variants/1.20.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.20.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.21.14-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.21.14-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 98f447d..459a89e 100644
--- a/variants/1.21.14-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.21.14-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.22.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.22.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 1ba4163..73c6b2d 100644
--- a/variants/1.22.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.22.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.23.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.23.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 5623df9..2978f70 100644
--- a/variants/1.23.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.23.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.24.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.24.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 9bb6f3e..256a9e4 100644
--- a/variants/1.24.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.24.17-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.25.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.25.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 07d35c2..67ffda7 100644
--- a/variants/1.25.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.25.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.26.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.26.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 9b9839e..8f552c1 100644
--- a/variants/1.26.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.26.15-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.27.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.27.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 1a7736f..08fc266 100644
--- a/variants/1.27.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.27.16-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.28.12-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.28.12-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index b18e2e7..8ecfb39 100644
--- a/variants/1.28.12-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.28.12-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.29.7-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.29.7-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index 62ae22f..7ef2132 100644
--- a/variants/1.29.7-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.29.7-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg
 
diff --git a/variants/1.30.3-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile b/variants/1.30.3-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
index d071e5c..6db42d7 100644
--- a/variants/1.30.3-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
+++ b/variants/1.30.3-envsubst-git-jq-kustomize-sops-ssh-yq/Dockerfile
@@ -41,11 +41,32 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
+# Install sops
 RUN set -eux; \
-    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    SOPS_VERSION=v3.9.0; \
+    case "$( uname -m )" in \
+        'x86_64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64"; \
+            SHA256=0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82; \
+            ;; \
+        'aarch64') \
+            URL="https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.arm64"; \
+            SHA256=596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc; \
+            ;; \
+        *) \
+            echo "Architecture not supported"; \
+            exit 1; \
+            ;; \
+    esac; \
+    FILE=sops; \
+    wget -q "$URL" -O "$FILE"; \
+    echo "$SHA256  $FILE" | sha256sum -c -; \
+    mkdir -pv /usr/local/bin; \
+    mv -v sops /usr/local/bin/sops; \
     chmod +x /usr/local/bin/sops; \
-    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
-    sops --version
+    sops --version; \
+    :
+
 
 RUN apk add --no-cache gnupg