diff --git a/.gitea/workflows/build_container.yml b/.gitea/workflows/build_container.yml
index b60491b..6f87ac9 100644
--- a/.gitea/workflows/build_container.yml
+++ b/.gitea/workflows/build_container.yml
@@ -18,15 +18,15 @@ jobs:
           apt-get update
           apt-get -y install docker-ce docker-ce-cli containerd.io
       - name: Checkout branch
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Login to Gitea
-        uses: docker/login-action@v3.0.0
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
         with:
           registry: ${{ secrets.DOCKER_REGISTRY }}
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
       - name: Build and push image
-        uses: docker/build-push-action@v5.0.0
+        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
         with:
           context: .
           file: Dockerfile
diff --git a/docker-compose.yml b/docker-compose.yml
index a8619bd..bd6855d 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -2,7 +2,7 @@ version: '3.8'
 services:
   bot:
     container_name: Corn-Utility
-    image: 'git.toast-server.net/toast/corn-utility:main'
+    image: 'git.toast-server.net/toast/corn-utility:main@sha256:d966d1c466e60617d0059a4d9a3a147baf9228d2a90ed2dbceab4e9ad392e49e'
     volumes:
       - ./tokens.json:/home/corn-util/tokens.json:ro
     expose: