diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 9fc369f4e17b07db2d783804326965a9658f539c..7b163e9e1cd27aa0c974b6f7243504395d83eb69 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,4 +1,4 @@
-image: quay.io/sheogorath/build-ah-engine:1.2.0
+image: quay.io/sheogorath/build-ah-engine:1.2.0@sha256:d35a2574e227dd3507d31335e4cce1562de30ac17b4e80bf47da999fac9ea365
 
 before_script:
   - podman login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
diff --git a/Dockerfile b/Dockerfile
index e27d19b239ac75c256ed2078b32cb875bc485eb0..04bb500b189d6120f8cf1a27975f34ae4b8ca973 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/library/haproxy:1.9.15-alpine
+FROM docker.io/library/haproxy:1.9.15-alpine@sha256:1da27f6d19b52d85c3c31412f2e387be54b4cddba938d68ec6b24775bd89d75c
 
 EXPOSE 2375
 ENV ALLOW_RESTARTS=0 \