diff --git a/Dockerfile b/Dockerfile
index e354020..4094246 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-ARG BASE_IMAGE=libops/drupal:nginx-1.30.3-php84
+ARG BASE_IMAGE=libops/drupal:nginx-1.30.3-php84@sha256:d0749772e71fda42abad39063ef0a005f09714c9ff83881d64c9cebda685a4e1
 FROM ${BASE_IMAGE}
 
 ARG TARGETARCH
diff --git a/docker-compose.yml b/docker-compose.yml
index 3ecc6c3..331a12d 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -37,7 +37,7 @@ secrets:
 
 services:
   init:
-    image: libops/base:3.2.2.0
+    image: libops/base:3.2.2.0@sha256:8c864bf4dc06216f1662169c3c3a7a88d9e5c36be63c7b94bd42b28adaa3c5c0
     restart: no
     networks:
       default: