diff --git a/charts/tsa/Chart.yaml b/charts/tsa/Chart.yaml
index 8fea6c8d..533a5cbb 100644
--- a/charts/tsa/Chart.yaml
+++ b/charts/tsa/Chart.yaml
@@ -5,8 +5,8 @@ description: |
 
 type: application
 
-version: 1.0.4
-appVersion: 1.2.1
+version: 1.0.5
+appVersion: 1.2.2
 
 keywords:
   - security
@@ -21,5 +21,5 @@ annotations:
   artifacthub.io/license: Apache-2.0
   artifacthub.io/images: |
     - name: tsa
-      # crane digest ghcr.io/sigstore/timestamp-server:v1.2.1
-      image: ghcr.io/sigstore/timestamp-server@sha256:f4dcc96092a1b1fb5ca36d776f92a7cc62cdb1a8866c5120340f919141a3cd58
+      # crane digest ghcr.io/sigstore/timestamp-server:v1.2.2
+      image: ghcr.io/sigstore/timestamp-server@sha256:9f012408a0b2a91a0f017df419b732556a0bdd7482973dc3b87fe979e41ccc9a
diff --git a/charts/tsa/README.md b/charts/tsa/README.md
index 541502c6..ab3a29f1 100644
--- a/charts/tsa/README.md
+++ b/charts/tsa/README.md
@@ -2,7 +2,7 @@
 
 <!-- This README.md is generated. Please edit README.md.gotmpl -->
 
-![Version: 1.0.4](https://img.shields.io/badge/Version-1.0.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.2.1](https://img.shields.io/badge/AppVersion-1.2.1-informational?style=flat-square)
+![Version: 1.0.5](https://img.shields.io/badge/Version-1.0.5-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.2.2](https://img.shields.io/badge/AppVersion-1.2.2-informational?style=flat-square)
 
 Timestamp Authority issuing RFC3161 signed timestamps.
 
@@ -105,7 +105,7 @@ helm uninstall [RELEASE_NAME]
 | server.image.pullPolicy | string | `"IfNotPresent"` |  |
 | server.image.registry | string | `"ghcr.io"` |  |
 | server.image.repository | string | `"sigstore/timestamp-server"` |  |
-| server.image.version | string | `"sha256:f4dcc96092a1b1fb5ca36d776f92a7cc62cdb1a8866c5120340f919141a3cd58"` | v1.2.1 |
+| server.image.version | string | `"sha256:9f012408a0b2a91a0f017df419b732556a0bdd7482973dc3b87fe979e41ccc9a"` | v1.2.2 |
 | server.ingress.http.annotations | object | `{}` |  |
 | server.ingress.http.className | string | `"nginx"` |  |
 | server.ingress.http.enabled | bool | `true` |  |
diff --git a/charts/tsa/values.yaml b/charts/tsa/values.yaml
index 06b5806f..8fd2c6f4 100644
--- a/charts/tsa/values.yaml
+++ b/charts/tsa/values.yaml
@@ -16,9 +16,9 @@ server:
     registry: ghcr.io
     repository: sigstore/timestamp-server
     pullPolicy: IfNotPresent
-    # crane digest ghcr.io/sigstore/timestamp-server:v1.2.1
-    # -- v1.2.1
-    version: sha256:f4dcc96092a1b1fb5ca36d776f92a7cc62cdb1a8866c5120340f919141a3cd58
+    # crane digest ghcr.io/sigstore/timestamp-server:v1.2.2
+    # -- v1.2.2
+    version: sha256:9f012408a0b2a91a0f017df419b732556a0bdd7482973dc3b87fe979e41ccc9a
   args:
     port: 5555
     # Valid values: tink, kms, file