diff --git a/ko.yaml b/ko.yaml
index 8844e127b43..f3e2002c7eb 100644
--- a/ko.yaml
+++ b/ko.yaml
@@ -1,7 +1,7 @@
 package:
   name: ko
-  version: 0.13.0 # When bumping the version check if the GHSA mitigations below can be removed.
-  epoch: 8
+  version: 0.14.1 # When bumping the version check if the GHSA mitigations below can be removed.
+  epoch: 0
   description: Simple, fast container image builder for Go applications.
   copyright:
     - license: Apache-2.0
@@ -20,26 +20,9 @@ pipeline:
     with:
       repository: https://github.com/ko-build/ko
       tag: v${{package.version}}
-      expected-commit: e22e7a15ffb988adc14c3fc6a964f61ed711812f
+      expected-commit: 200db7243f02b5c0303e21d8ab8e3b4ad3a229d0
       destination: ko
 
-  - runs: |
-      cd ko
-
-      # GHSA-232p-vwff-86mp
-      # GHSA-33pg-m6jh-5237
-      # GHSA-6wrf-mxfj-pf5p
-      go get -u github.com/docker/docker@v23.0.3+incompatible
-
-      # GHSA-2h5h-59f5-c5x9
-      go get -u github.com/sigstore/rekor@v1.1.1
-
-      # GHSA-hw7c-3rfg-p46j
-      go get -u google.golang.org/protobuf@v1.29.1
-
-      go mod tidy
-      go mod vendor
-
   - uses: go/build
     with:
       packages: .