diff --git a/Dockerfile b/Dockerfile
index 22c8626..cc1840c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Use a full image with uv pre-installed as builder
-FROM ghcr.io/astral-sh/uv:python3.13-trixie AS builder
+FROM ghcr.io/astral-sh/uv:python3.13-trixie@sha256:994e3f1dbd0828082a77e089443b6a85b6b04b13c699c944c53b57e50c4de71d AS builder
 
 # Install the project into `/app`
 WORKDIR /app
@@ -23,7 +23,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
     uv sync --no-dev --locked
 
 # Use slim image as runner
-FROM ghcr.io/astral-sh/uv:python3.13-trixie-slim AS runner
+FROM ghcr.io/astral-sh/uv:python3.13-trixie-slim@sha256:68bbb9d4281aa16c9780820ceaf4c558d78fb65ce45d42eb589d7234e3f26e15 AS runner
 
 # Metadata for the image
 ARG IMAGE_CREATED="unknown"