diff --git a/Dockerfile b/Dockerfile
index 2ad1759736c519f18b6d5ff041d5a9d1abd23890..0c087301463d1990799b77b363d3a48159d194e6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24-alpine AS base
+FROM node:24-alpine@sha256:156b55f92e98ccd5ef49578a8cea0df4679826564bad1c9d4ef04462b9f0ded6 AS base
 # add openssl as root
 RUN apk add --no-cache openssl 
 
diff --git a/docker-compose.yml b/docker-compose.yml
index 548d0163f11f1c8e847b692b7a98c2015235cdd3..f54f0af398a514989e2818b618373f0946c7c9c1 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -34,14 +34,14 @@ services:
       - canvas
   redis:
     restart: always
-    image: redis:7-alpine
+    image: redis:7-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
     volumes:
       - ./data/redis:/data
   postgres:
     restart: always
-    image: postgres:14-alpine
+    image: postgres:14-alpine@sha256:f1148c0146b1cd042c566ea15873b479e17bd14589c9eb6bd44a03224a7989c7
     user: ${UID}:${GID}
     healthcheck:
       test: ["CMD", "pg_isready", "-U", "postgres"]