diff --git a/amass.yaml b/amass.yaml
index c7991bf522e..99324ac445d 100644
--- a/amass.yaml
+++ b/amass.yaml
@@ -1,7 +1,7 @@
 package:
   name: amass
   version: 4.2.0
-  epoch: 8
+  epoch: 9
   description: "attack surfaces and external asset discovery tools set"
   copyright:
     - license: Apache-2.0
@@ -28,6 +28,7 @@ pipeline:
       packages: ./cmd/amass
       modroot: .
       output: amass
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 
diff --git a/buf.yaml b/buf.yaml
index 5aa523de6c8..ca96e9fbabf 100644
--- a/buf.yaml
+++ b/buf.yaml
@@ -1,7 +1,7 @@
 package:
   name: buf
   version: 1.31.0
-  epoch: 2
+  epoch: 3
   description: A new way of working with Protocol Buffers.
   copyright:
     - license: Apache-2.0
@@ -24,6 +24,7 @@ pipeline:
       packages: ./cmd/buf
       modroot: .
       output: buf
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 
diff --git a/controller-gen.yaml b/controller-gen.yaml
index eb33754de5b..198b83f7d43 100644
--- a/controller-gen.yaml
+++ b/controller-gen.yaml
@@ -1,7 +1,7 @@
 package:
   name: controller-gen
   version: 0.15.0
-  epoch: 2
+  epoch: 3
   description: Tools to use with the controller-runtime libraries
   copyright:
     - license: Apache-2.0
@@ -27,6 +27,7 @@ pipeline:
       packages: ./cmd/controller-gen
       modroot: .
       output: controller-gen
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 
diff --git a/fq.yaml b/fq.yaml
index 1dee9959141..6eb3fa9cea9 100644
--- a/fq.yaml
+++ b/fq.yaml
@@ -1,7 +1,7 @@
 package:
   name: fq
   version: 0.11.0
-  epoch: 2
+  epoch: 3
   description: "jq for binary formats - tool, language and decoders for working with binary and text formats"
   copyright:
     - license: MIT
@@ -18,6 +18,7 @@ pipeline:
       packages: ./
       modroot: .
       output: fq
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 
diff --git a/gcsfuse.yaml b/gcsfuse.yaml
index 254b14bb31a..82a8419ccac 100644
--- a/gcsfuse.yaml
+++ b/gcsfuse.yaml
@@ -1,7 +1,7 @@
 package:
   name: gcsfuse
   version: 1.4.2
-  epoch: 5
+  epoch: 6
   description: A user-space file system for interacting with Google Cloud Storage
   copyright:
     - license: Apache-2.0
@@ -26,6 +26,7 @@ pipeline:
       packages: .
       modroot: .
       output: gcsfuse
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true
diff --git a/gobuster.yaml b/gobuster.yaml
index bad0ee59cc5..0304ede920d 100644
--- a/gobuster.yaml
+++ b/gobuster.yaml
@@ -1,7 +1,7 @@
 package:
   name: gobuster
   version: 3.6.0
-  epoch: 9
+  epoch: 10
   description: "a tool used to brute force attack for URIs, DNS, etc."
   copyright:
     - license: Apache-2.0
@@ -28,6 +28,7 @@ pipeline:
       packages: .
       modroot: .
       output: gobuster
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 
diff --git a/goreleaser-1.18.yaml b/goreleaser-1.18.yaml
index a8d8e2c248b..14fa2a691df 100644
--- a/goreleaser-1.18.yaml
+++ b/goreleaser-1.18.yaml
@@ -1,7 +1,7 @@
 package:
   name: goreleaser-1.18
   version: 1.18.2
-  epoch: 9
+  epoch: 10
   description: Deliver Go binaries as fast and easily as possible
   copyright:
     - license: Apache-2.0
@@ -26,6 +26,7 @@ pipeline:
       packages: .
       modroot: .
       output: goreleaser
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true
diff --git a/goreleaser.yaml b/goreleaser.yaml
index a2162c8f606..586b463b8ef 100644
--- a/goreleaser.yaml
+++ b/goreleaser.yaml
@@ -1,7 +1,7 @@
 package:
   name: goreleaser
   version: 1.26.0
-  epoch: 1
+  epoch: 2
   description: Deliver Go binaries as fast and easily as possible
   copyright:
     - license: Apache-2.0
@@ -23,6 +23,7 @@ pipeline:
       packages: .
       modroot: .
       output: goreleaser
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true
diff --git a/nsc.yaml b/nsc.yaml
index ad3b2a20d26..57827f870cc 100644
--- a/nsc.yaml
+++ b/nsc.yaml
@@ -1,7 +1,7 @@
 package:
   name: nsc
   version: 2.8.6
-  epoch: 4
+  epoch: 5
   description: Tool for creating nkey/jwt based configurations
   copyright:
     - license: Apache-2.0
@@ -23,6 +23,7 @@ pipeline:
       packages: .
       modroot: .
       output: nsc
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true
diff --git a/sbom-scorecard.yaml b/sbom-scorecard.yaml
index 696249fce74..25e0f942e9c 100644
--- a/sbom-scorecard.yaml
+++ b/sbom-scorecard.yaml
@@ -1,7 +1,7 @@
 package:
   name: sbom-scorecard
   version: 0.0.7
-  epoch: 10
+  epoch: 11
   description: Generate a score for your sbom to understand if it will actually be useful.
   copyright:
     - license: Apache-2.0
@@ -23,6 +23,7 @@ pipeline:
       packages: ./cmd/sbom-scorecard
       modroot: .
       output: sbom-scorecard
+      ldflags: -w -X github.com/eBay/sbom-scorecard.version=${{package.version}} -X github.com/eBay/sbom-scorecard.commit=$(git rev-parse HEAD) -X github.com/eBay/sbom-scorecard.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true
diff --git a/sbomqs.yaml b/sbomqs.yaml
index f1a93126a29..0b072352437 100644
--- a/sbomqs.yaml
+++ b/sbomqs.yaml
@@ -1,7 +1,7 @@
 package:
   name: sbomqs
   version: 0.1.3
-  epoch: 2
+  epoch: 3
   description: SBOM quality score - Quality metrics for your sboms
   copyright:
     - license: Apache-2.0
@@ -18,6 +18,7 @@ pipeline:
       packages: .
       modroot: .
       output: sbomqs
+      ldflags: -w -X sigs.k8s.io/release-utils/version.gitVersion=${{package.version}} -X sigs.k8s.io/release-utils/version.gitCommit=$(git rev-parse HEAD) -X sigs.k8s.io/release-utils/version.buildDate=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 
diff --git a/slsa-verifier.yaml b/slsa-verifier.yaml
index 7345427de8a..b987b2939c8 100644
--- a/slsa-verifier.yaml
+++ b/slsa-verifier.yaml
@@ -1,7 +1,7 @@
 package:
   name: slsa-verifier
   version: 2.5.1
-  epoch: 4
+  epoch: 5
   description: Verify provenance from SLSA compliant builders
   copyright:
     - license: Apache-2.0
@@ -23,6 +23,7 @@ pipeline:
       packages: ./cli/slsa-verifier
       modroot: .
       output: slsa-verifier
+      ldflags: -w -X sigs.k8s.io/release-utils/version.gitVersion=${{package.version}} -X sigs.k8s.io/release-utils/version.gitCommit=$(git rev-parse HEAD) -X sigs.k8s.io/release-utils/version.buildDate=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
 update:
   enabled: true
diff --git a/supercronic.yaml b/supercronic.yaml
index 62d04df28ed..e70e7d4626b 100644
--- a/supercronic.yaml
+++ b/supercronic.yaml
@@ -1,7 +1,7 @@
 package:
   name: supercronic
   version: 0.2.29
-  epoch: 5
+  epoch: 6
   description: Cron for containers
   copyright:
     - license: MIT
@@ -26,6 +26,7 @@ pipeline:
       packages: .
       modroot: .
       output: supercronic
+      ldflags: -w -X main.version=${{package.version}} -X main.commit=$(git rev-parse HEAD) -X main.date=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip
 
diff --git a/vexctl.yaml b/vexctl.yaml
index 9388a445cd8..8e3a91da64c 100644
--- a/vexctl.yaml
+++ b/vexctl.yaml
@@ -1,7 +1,7 @@
 package:
   name: vexctl
   version: 0.2.6
-  epoch: 4
+  epoch: 5
   description: A tool to create, transform and attest VEX metadata
   copyright:
     - license: Apache-2.0
@@ -18,6 +18,7 @@ pipeline:
       packages: .
       modroot: .
       output: vexctl
+      ldflags: -w -X sigs.k8s.io/release-utils/version.gitVersion=${{package.version}} -X sigs.k8s.io/release-utils/version.gitCommit=$(git rev-parse HEAD) -X sigs.k8s.io/release-utils/version.buildDate=$(date ${SOURCE_DATE_EPOCH:+ -d@${SOURCE_DATE_EPOCH}} "+%Y-%m-%dT%H:%M:%SZ")
 
   - uses: strip