diff --git a/Cargo.lock b/Cargo.lock
index e08834274..32afbbc38 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -564,7 +564,7 @@ checksum = "55b672471b4e9f9e95499ea597ff64941a309b2cdbffcc46f2cc5e2d971fd335"
 [[package]]
 name = "composefs"
 version = "0.3.0"
-source = "git+https://github.com/containers/composefs-rs?rev=28d4721f77f973f0e394d60d6a69d9b39cb38d7f#28d4721f77f973f0e394d60d6a69d9b39cb38d7f"
+source = "git+https://github.com/containers/composefs-rs?rev=8d1e570275621531d39b8f01681584bcc85ce01c#8d1e570275621531d39b8f01681584bcc85ce01c"
 dependencies = [
  "anyhow",
  "hex",
@@ -584,7 +584,7 @@ dependencies = [
 [[package]]
 name = "composefs-boot"
 version = "0.3.0"
-source = "git+https://github.com/containers/composefs-rs?rev=28d4721f77f973f0e394d60d6a69d9b39cb38d7f#28d4721f77f973f0e394d60d6a69d9b39cb38d7f"
+source = "git+https://github.com/containers/composefs-rs?rev=8d1e570275621531d39b8f01681584bcc85ce01c#8d1e570275621531d39b8f01681584bcc85ce01c"
 dependencies = [
  "anyhow",
  "composefs",
@@ -597,7 +597,7 @@ dependencies = [
 [[package]]
 name = "composefs-oci"
 version = "0.3.0"
-source = "git+https://github.com/containers/composefs-rs?rev=28d4721f77f973f0e394d60d6a69d9b39cb38d7f#28d4721f77f973f0e394d60d6a69d9b39cb38d7f"
+source = "git+https://github.com/containers/composefs-rs?rev=8d1e570275621531d39b8f01681584bcc85ce01c#8d1e570275621531d39b8f01681584bcc85ce01c"
 dependencies = [
  "anyhow",
  "async-compression",
diff --git a/Cargo.toml b/Cargo.toml
index 278d19deb..1d3dd9150 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -39,9 +39,9 @@ cap-std-ext = "4.0.3"
 chrono = { version = "0.4.38", default-features = false }
 clap = "4.5.4"
 clap_mangen = { version = "0.2.20" }
-composefs = { git = "https://github.com/containers/composefs-rs", rev = "28d4721f77f973f0e394d60d6a69d9b39cb38d7f", package = "composefs", features = ["rhel9"] }
-composefs-boot = { git = "https://github.com/containers/composefs-rs", rev = "28d4721f77f973f0e394d60d6a69d9b39cb38d7f", package = "composefs-boot" }
-composefs-oci = { git = "https://github.com/containers/composefs-rs", rev = "28d4721f77f973f0e394d60d6a69d9b39cb38d7f", package = "composefs-oci" }
+composefs = { git = "https://github.com/containers/composefs-rs", rev = "8d1e570275621531d39b8f01681584bcc85ce01c", package = "composefs", features = ["rhel9"] }
+composefs-boot = { git = "https://github.com/containers/composefs-rs", rev = "8d1e570275621531d39b8f01681584bcc85ce01c", package = "composefs-boot" }
+composefs-oci = { git = "https://github.com/containers/composefs-rs", rev = "8d1e570275621531d39b8f01681584bcc85ce01c", package = "composefs-oci" }
 fn-error-context = "0.2.1"
 hex = "0.4.3"
 indicatif = "0.18.0"
diff --git a/crates/lib/src/cfsctl.rs b/crates/lib/src/cfsctl.rs
index 1c5642535..0e562e91f 100644
--- a/crates/lib/src/cfsctl.rs
+++ b/crates/lib/src/cfsctl.rs
@@ -245,7 +245,8 @@ where
                 println!("{}", image_id.to_id());
             }
             OciCommand::Pull { ref image, name } => {
-                let (sha256, verity) = composefs_oci::pull(&repo, image, name.as_deref()).await?;
+                let (sha256, verity) =
+                    composefs_oci::pull(&repo, image, name.as_deref(), None).await?;
 
                 println!("sha256 {}", hex::encode(sha256));
                 println!("verity {}", verity.to_hex());