diff --git a/.gitignore b/.gitignore
index c8d345a..b24fbfe 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,3 +23,4 @@
 /skopeo-7fd6f66.tar.gz
 /skopeo-2e8377a.tar.gz
 /skopeo-93876ac.tar.gz
+/skopeo-0270e56.tar.gz
diff --git a/skopeo.spec b/skopeo.spec
index 0524de8..66db854 100644
--- a/skopeo.spec
+++ b/skopeo.spec
@@ -26,7 +26,7 @@
 %global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo}
 %global import_path     %{provider_prefix}
 %global git0            https://%{import_path}
-%global commit0         93876acc5ef7ecfc79bdd6852013a49901c54591
+%global commit0         0270e5694c9adf6eabfa3ab1f2980b8b62deb4b7
 %global shortcommit0    %(c=%{commit0}; echo ${c:0:7})
 
 # e.g. el6 has ppc64 arch without gcc-go, so EA tag is required
@@ -37,7 +37,7 @@ Name:           %{repo}
 %if 0%{?centos}
 Epoch:          1
 %endif # centos
-Version:        0.1.27
+Version:        0.1.28
 Release:        1.git%{shortcommit0}%{?dist}
 Summary:        Inspect Docker images and repositories on registries
 License:        ASL 2.0
@@ -306,6 +306,9 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
 %{_datadir}/bash-completion/completions/%{name}
 
 %changelog
+* Fri Feb 2 2018 dwalsh <dwalsh@redhat.com> - 0.1.28-1.git
+- Vendor in fixed libraries in containers/image and containers/storage
+
 * Tue Nov 21 2017 dwalsh <dwalsh@redhat.com> - 0.1.27-1.git
 - Fix Conflicts to Obsoletes
 - Add better docs to man pages.
diff --git a/sources b/sources
index 2ecd9b3..8b861ec 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (skopeo-93876ac.tar.gz) = 63eeaf95a00f27630b2e92f6b5c198e096e914d6e89e8cf4891a322e8019a55162356e6701a0e4dd61501e980c1912f411468913ab11054c2ac9bf9c04d71664
+SHA512 (skopeo-0270e56.tar.gz) = bdc7f5bfc76f54325c7e83d3c435d5db341ed347c2dea5e021c52c8c9f4b2999465d948379666228c0237018f82c8c81fa077e8592fb5aba7a5176f7ce77fc11