diff --git a/manifests/function/generate-secrets-example/README.md b/manifests/function/generate-secrets-example/README.md
index 4120cc171..3ed97bf27 100644
--- a/manifests/function/generate-secrets-example/README.md
+++ b/manifests/function/generate-secrets-example/README.md
@@ -47,7 +47,7 @@ metadata:
 kustomizeSinkOutputDir: "target/generator/results/generated"
 spec:
   container:
-    image: quay.io/aodinokov/sops:v0.0.3
+    image: gcr.io/kpt-fn-contrib/sops:v0.1.0
     envs:
     - SOPS_IMPORT_PGP
     - SOPS_PGP_FP
@@ -115,4 +115,4 @@ files in place in the same folder.
 Kustomize command to decrypt:
 
 `KUSTOMIZE_PLUGIN_HOME=$(pwd)/manifests SOPS_IMPORT_PGP=$(cat key.asc) kustomize build \ --enable_alpha_plugins \
-manifests/site/test-site/target/generator/results`
\ No newline at end of file
+manifests/site/test-site/target/generator/results`
diff --git a/tools/deployment/update-krm-images b/tools/deployment/update-krm-images
index 1830fa9f2..9c40794ed 100755
--- a/tools/deployment/update-krm-images
+++ b/tools/deployment/update-krm-images
@@ -24,7 +24,7 @@ export MANIFEST_DIR=${MANIFEST_DIR:-"$(pwd)"}
 export OLD_REPLACEMENT_TRANSFORMER=${OLD_REPLACEMENT_TRANSFORMER:-"quay.io/airshipit/replacement-transformer:v2"}
 export OLD_TEMPLATER=${OLD_TEMPLATER:-"quay.io/airshipit/templater:v2"}
 export OLD_CLOUD_INIT=${OLD_CLOUD_INIT:-"quay.io/airshipit/cloud-init:v2"}
-export OLD_SOPS=${OLD_SOPS:-"quay.io/aodinokov/sops:v0.0.3"}
+export OLD_SOPS=${OLD_SOPS:-"gcr.io/kpt-fn-contrib/sops:v0.1.0"}
 
 export NEW_REPLACEMENT_TRANSFORMER=${NEW_REPLACEMENT_TRANSFORMER:-$OLD_REPLACEMENT_TRANSFORMER}
 export NEW_TEMPLATER=${NEW_TEMPLATER:-$OLD_TEMPLATER}