diff --git a/bitnami/thanos/0/scratch/Dockerfile b/bitnami/thanos/0/scratch/Dockerfile
index 897ca36f9d5f..2aca752d061c 100644
--- a/bitnami/thanos/0/scratch/Dockerfile
+++ b/bitnami/thanos/0/scratch/Dockerfile
@@ -1,5 +1,9 @@
 FROM bitnami/minideb:bullseye as builder
 
+ARG TARGETARCH
+
+ENV OS_ARCH="${TARGETARCH:-amd64}"
+
 COPY prebuildfs /
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
@@ -7,24 +11,30 @@ SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 # Install required system packages and dependencies
 RUN install_packages ca-certificates curl gzip tar
 RUN mkdir -p /tmp/bitnami/pkg/cache/ && cd /tmp/bitnami/pkg/cache/ && \
-    if [ ! -f thanos-0.28.0-0-linux-amd64-debian-11.tar.gz ]; then \
-      curl -SsLf https://downloads.bitnami.com/files/stacksmith/thanos-0.28.0-0-linux-amd64-debian-11.tar.gz -O ; \
+    if [ ! -f thanos-0.28.0-0-linux-${OS_ARCH}-debian-11.tar.gz ]; then \
+      curl -SsLf https://downloads.bitnami.com/files/stacksmith/thanos-0.28.0-0-linux-${OS_ARCH}-debian-11.tar.gz -O ; \
+      curl -SsLf https://downloads.bitnami.com/files/stacksmith/thanos-0.28.0-0-linux-${OS_ARCH}-debian-11.tar.gz.sha256 -O ; \
     fi && \
-    echo "8bc50d6e82ce7c5173cf75e844e575925139b2f76f68e01b69ff74e1512d155c  thanos-0.28.0-0-linux-amd64-debian-11.tar.gz" | sha256sum -c - && \
-    tar -zxf thanos-0.28.0-0-linux-amd64-debian-11.tar.gz -C /opt/bitnami --strip-components=2 --wildcards '*/files' && \
-    rm -rf thanos-0.28.0-0-linux-amd64-debian-11.tar.gz
+    sha256sum -c thanos-0.28.0-0-linux-${OS_ARCH}-debian-11.tar.gz.sha256 && \
+    tar -zxf thanos-0.28.0-0-linux-${OS_ARCH}-debian-11.tar.gz -C /opt/bitnami --strip-components=2 --no-same-owner --wildcards '*/files' && \
+    rm -rf thanos-0.28.0-0-linux-${OS_ARCH}-debian-11.tar.gz
 
 ######
 
 FROM scratch
 
+ARG TARGETARCH
+
+ENV OS_ARCH="${TARGETARCH:-amd64}"
+
 LABEL org.opencontainers.image.authors="https://bitnami.com/contact" \
       org.opencontainers.image.description="Application packaged by Bitnami" \
-      org.opencontainers.image.ref.name="0.28.0-scratch-r0" \
+      org.opencontainers.image.ref.name="0.28.0-scratch-r1" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/thanos" \
       org.opencontainers.image.title="thanos" \
       org.opencontainers.image.vendor="VMware, Inc." \
       org.opencontainers.image.version="0.28.0"
+
 COPY prebuildfs /
 COPY rootfs /
 COPY --from=builder /opt/bitnami/thanos/bin/thanos /bin/thanos
diff --git a/bitnami/thanos/README.md b/bitnami/thanos/README.md
index c19f16d77236..2f772385a374 100644
--- a/bitnami/thanos/README.md
+++ b/bitnami/thanos/README.md
@@ -42,7 +42,7 @@ Non-root container images add an extra layer of security and are generally recom
 Learn more about the Bitnami tagging policy and the difference between rolling tags and immutable tags [in our documentation page](https://docs.bitnami.com/tutorials/understand-rolling-tags-containers/).
 
 
-* [`0`, `0-scratch`, `0.28.0`, `0.28.0-scratch-r0`, `latest` (0/scratch/Dockerfile)](https://github.com/bitnami/containers/blob/main/bitnami/thanos/0/scratch/Dockerfile)
+* [`0`, `0-scratch`, `0.28.0`, `0.28.0-scratch-r1`, `latest` (0/scratch/Dockerfile)](https://github.com/bitnami/containers/blob/main/bitnami/thanos/0/scratch/Dockerfile)
 
 ## Connecting to other containers