diff --git a/bitnami/grafana-image-renderer/5.10/debian-12/Dockerfile b/bitnami/grafana-image-renderer/5.10/debian-12/Dockerfile
index 4801b964f423..b6ab809018d2 100644
--- a/bitnami/grafana-image-renderer/5.10/debian-12/Dockerfile
+++ b/bitnami/grafana-image-renderer/5.10/debian-12/Dockerfile
@@ -7,7 +7,7 @@ ARG DOWNLOADS_URL="https://downloads.bitnami.com/files/stacksmith"
 ARG TARGETARCH
 
 LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2026-07-14T16:52:43Z" \
+      org.opencontainers.image.created="2026-07-20T09:18:46Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/grafana-image-renderer/README.md" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/grafana-image-renderer" \
@@ -23,7 +23,7 @@ ENV HOME="/" \
 COPY prebuildfs /
 SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]
 # Install required system packages and dependencies
-RUN install_packages ca-certificates chromium curl fonts-freefont-ttf fonts-ipafont-gothic fonts-kacst fonts-thai-tlwg fonts-wqy-zenhei gnupg jq libbz2-1.0 libffi8 liblzma5 libncursesw6 libreadline8 libsqlite3-0 libssl3 libtinfo6 libx11-xcb1 libxcb-dri3-0 libxshmfence1 libxss1 libxtst6 procps wget zlib1g
+RUN install_packages ca-certificates chromium curl fonts-freefont-ttf fonts-ipafont-gothic fonts-kacst fonts-thai-tlwg fonts-wqy-zenhei gnupg jq libbz2-1.0 libffi8 liblzma5 libncursesw6 libnss3-tools libreadline8 libsqlite3-0 libssl3 libtinfo6 libx11-xcb1 libxcb-dri3-0 libxshmfence1 libxss1 libxtst6 procps wget zlib1g
 RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
     DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
     mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
@@ -46,16 +46,17 @@ RUN chmod g+rwX /opt/bitnami
 RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
 RUN uninstall_packages curl
 
+COPY rootfs /
 ENV APP_VERSION="5.10.1" \
     BITNAMI_APP_NAME="grafana-image-renderer" \
     HTTP_HOST="0.0.0.0" \
     HTTP_PORT="8080" \
-    IMAGE_REVISION="0" \
+    IMAGE_REVISION="1" \
     PATH="/opt/bitnami/python/bin:/opt/bitnami/grafana-image-renderer/bin:$PATH"
 
 EXPOSE 8080
 
 WORKDIR /opt/bitnami/grafana-image-renderer
 USER 1001
-ENTRYPOINT [ "grafana-image-renderer" ]
+ENTRYPOINT [ "/opt/bitnami/scripts/grafana-image-renderer/entrypoint.sh" ]
 CMD [ "server" ]
diff --git a/bitnami/grafana-image-renderer/5.10/debian-12/rootfs/opt/bitnami/scripts/grafana-image-renderer/entrypoint.sh b/bitnami/grafana-image-renderer/5.10/debian-12/rootfs/opt/bitnami/scripts/grafana-image-renderer/entrypoint.sh
new file mode 100755
index 000000000000..5871fb9d693e
--- /dev/null
+++ b/bitnami/grafana-image-renderer/5.10/debian-12/rootfs/opt/bitnami/scripts/grafana-image-renderer/entrypoint.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+# Copyright Broadcom, Inc. All Rights Reserved.
+# SPDX-License-Identifier: APACHE-2.0
+
+set -o errexit
+set -o nounset
+set -o pipefail
+
+export HOME="/opt/bitnami/grafana-image-renderer"
+
+if [[ -n "${CA_CERTIFICATES_PATH:-}" ]] && [[ -f "${CA_CERTIFICATES_PATH}" ]]; then
+    echo "Adding custom CA certificate to NSS database..."
+    mkdir -p "$HOME/.pki/nssdb"
+    certutil -d sql:"$HOME/.pki/nssdb" -N --empty-password
+    certutil -d sql:"$HOME/.pki/nssdb" -A -t "C,," -n custom-ca -i "${CA_CERTIFICATES_PATH}"
+fi
+
+exec grafana-image-renderer "$@"
\ No newline at end of file