diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index 20430d01..2f11b829 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -15,7 +15,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@v3
         with:
-          go-version: 1.20.10
+          go-version: 1.20.11
       - uses: actions/checkout@v2
         with:
           fetch-depth: '0'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d45df40d..fea3dfcb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.20.10
+          go-version: 1.20.11
       - name: Retrieve version
         run: |
           echo "TAG_NAME=$(echo ${{ github.ref }}  | grep -Eo 'v[0-9].*')" >> $GITHUB_OUTPUT
diff --git a/.github/workflows/test-gh.yml b/.github/workflows/test-gh.yml
index fbeaab8d..1051ccf3 100644
--- a/.github/workflows/test-gh.yml
+++ b/.github/workflows/test-gh.yml
@@ -13,7 +13,7 @@ jobs:
     - name: Set up Go 1.x
       uses: actions/setup-go@v1
       with:
-        go-version: 1.20.10
+        go-version: 1.20.11
     - name: Check out code into the Go module directory
       uses: actions/checkout@v1
       with:
diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index d4ddd4fb..a23eb6f5 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -10,7 +10,7 @@ jobs:
     with:
       repo: carvel-dev/vendir
       tool: vendir
-      goVersion: 1.20.10
+      goVersion: 1.20.11
     secrets:
       githubToken: ${{ secrets.GITHUB_TOKEN }}
       slackWebhookURL: ${{ secrets.SLACK_WEBHOOK_URL }}
diff --git a/go.mod b/go.mod
index b0c22829..6d052b3f 100644
--- a/go.mod
+++ b/go.mod
@@ -17,7 +17,7 @@ require (
 	github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5
 	github.com/spf13/cobra v1.7.0
 	github.com/stretchr/testify v1.8.4
-	github.com/vmware-tanzu/carvel-imgpkg v0.37.6
+	github.com/vmware-tanzu/carvel-imgpkg v0.37.8
 	golang.org/x/crypto v0.14.0
 	golang.org/x/oauth2 v0.8.0
 	golang.org/x/tools v0.12.0
diff --git a/go.sum b/go.sum
index aab26e1b..0efe8546 100644
--- a/go.sum
+++ b/go.sum
@@ -333,8 +333,8 @@ github.com/vbatts/tar-split v0.11.3 h1:hLFqsOLQ1SsppQNTMpkpPXClLDfC2A3Zgy9OUU+RV
 github.com/vbatts/tar-split v0.11.3/go.mod h1:9QlHN18E+fEH7RdG+QAJJcuya3rqT7eXSTY7wGrAokY=
 github.com/vito/go-interact v1.0.1 h1:O8xi8c93bRUv2Tb/v6HdiuGc+WnWt+AQzF74MOOdlBs=
 github.com/vito/go-interact v1.0.1/go.mod h1:HrdHSJXD2yn1MhlTwSIMeFgQ5WftiIorszVGd3S/DAA=
-github.com/vmware-tanzu/carvel-imgpkg v0.37.6 h1:2q1MJF5Vs9YL+ovcgXIIxonJFvak1sfrsp/VLomkQw4=
-github.com/vmware-tanzu/carvel-imgpkg v0.37.6/go.mod h1:X0WGElm/Eiy42HkAu8I8nPg8wjPrVsfpt7MrTWkh4pQ=
+github.com/vmware-tanzu/carvel-imgpkg v0.37.8 h1:OTzYdgKcxB8g0kFPlNTXTFlr/+2Hz3U5lxMM4UVjYRs=
+github.com/vmware-tanzu/carvel-imgpkg v0.37.8/go.mod h1:Lzr4hzEkVBO3ks/6UyilNesXg5VsrhCf6rw94xd8KCQ=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
diff --git a/vendor/github.com/vmware-tanzu/carvel-imgpkg/pkg/imgpkg/internal/util/tag.go b/vendor/github.com/vmware-tanzu/carvel-imgpkg/pkg/imgpkg/internal/util/tag.go
index ea785e79..80eef5b7 100644
--- a/vendor/github.com/vmware-tanzu/carvel-imgpkg/pkg/imgpkg/internal/util/tag.go
+++ b/vendor/github.com/vmware-tanzu/carvel-imgpkg/pkg/imgpkg/internal/util/tag.go
@@ -5,6 +5,7 @@ package util
 
 import (
 	"fmt"
+	"regexp"
 	"strings"
 
 	regname "github.com/google/go-containerregistry/pkg/name"
@@ -65,13 +66,19 @@ func (tagGen RepoBasedTagGenerator) GenerateTag(item imagedigest.DigestWrap, imp
 	}
 
 	origRepoPath = strings.Join(strings.Split(origRepoPath, "/")[1:], "-")
+
+	pattern := `^[^a-zA-Z0-9_]+|[^a-zA-Z0-9\._-]+`
+	regex := regexp.MustCompile(pattern)
+	cleanedOrigRepoPath := regex.ReplaceAllString(origRepoPath, "")
+
 	digestArr := strings.Split(item.RegnameDigest().DigestStr(), ":")
-	tagStartIdx := len(origRepoPath) - 49
+	tagStartIdx := len(cleanedOrigRepoPath) - 49
 	if tagStartIdx < 0 {
 		tagStartIdx = 0
 	}
 
-	dashedRepo := fmt.Sprintf("%s-%s-%s.imgpkg", origRepoPath[tagStartIdx:], digestArr[0], digestArr[1])
+	cleanedTag := regex.ReplaceAllString(cleanedOrigRepoPath[tagStartIdx:], "")
+	dashedRepo := fmt.Sprintf("%s-%s-%s.imgpkg", cleanedTag, digestArr[0], digestArr[1])
 	// if tag starts with a "-", PUT to /v2/<repo>/manifests/-<foo>
 	// will give an "un-recognized request" error
 	if strings.HasPrefix(dashedRepo, "-") {
diff --git a/vendor/modules.txt b/vendor/modules.txt
index ba4bddd9..93a0d253 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -367,7 +367,7 @@ github.com/vbatts/tar-split/archive/tar
 # github.com/vito/go-interact v1.0.1
 ## explicit; go 1.12
 github.com/vito/go-interact/interact
-# github.com/vmware-tanzu/carvel-imgpkg v0.37.6
+# github.com/vmware-tanzu/carvel-imgpkg v0.37.8
 ## explicit; go 1.20
 github.com/vmware-tanzu/carvel-imgpkg/pkg/imgpkg/bundle
 github.com/vmware-tanzu/carvel-imgpkg/pkg/imgpkg/image