diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 739a5e2..1e41467 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,4 +1,4 @@
-image: docker.io/library/eclipse-temurin:21.0.7_6-jdk-alpine
+image: docker.io/library/eclipse-temurin:21.0.7_6-jdk-alpine@sha256:8e26f8064f2b89bc8543faf43ded3f223f47dd0a7afca042fdc892f1f6a4a8c3
 
 variables:
   MAVEN_OPTS: >-
@@ -69,7 +69,7 @@ package:
 
 docker-build:
   stage: docker-build
-  image: quay.io/buildah/stable
+  image: quay.io/buildah/stable@sha256:01c6a545d91e60325f4d8f645e3e90751a889a2e4a7f430aaca55b81d6a857d6
   script:
     - buildah bud -f Dockerfile -t $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG .
     - echo "$CI_REGISTRY_PASSWORD" | buildah login -u "$CI_REGISTRY_USER" --password-stdin "$CI_REGISTRY"
diff --git a/Dockerfile b/Dockerfile
index e8e7d54..86a8145 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/library/eclipse-temurin:21.0.6_7-jdk-alpine AS build
+FROM docker.io/library/eclipse-temurin:21.0.6_7-jdk-alpine@sha256:cafcfad1d9d3b6e7dd983fa367f085ca1c846ce792da59bcb420ac4424296d56 AS build
 
 COPY .mvn/ .mvn
 COPY mvnw pom.xml ./
@@ -9,7 +9,7 @@ RUN ["chmod", "+x", "./mvnw"]
 RUN ./mvnw install
 
 
-FROM docker.io/library/eclipse-temurin:21.0.6_7-jre-alpine
+FROM docker.io/library/eclipse-temurin:21.0.6_7-jre-alpine@sha256:4e9ab608d97796571b1d5bbcd1c9f430a89a5f03fe5aa6c093888ceb6756c502
 
 RUN apk add netcat-openbsd
 RUN apk add curl
diff --git a/docker-compose-webapp.yml b/docker-compose-webapp.yml
index bd39fd7..52c3955 100644
--- a/docker-compose-webapp.yml
+++ b/docker-compose-webapp.yml
@@ -1,6 +1,6 @@
 services:
   db:
-    image: mariadb:lts
+    image: mariadb:lts@sha256:4b1e7958f820681b1b93b9cf9ea05a76e0785da12699a1fb1d05e0eb2137e56b
     container_name: db
     restart: unless-stopped
     volumes:
diff --git a/docker-compose.yml b/docker-compose.yml
index 2b12427..79bbec0 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   netneutrality-db:
-    image: mariadb:lts
+    image: mariadb:lts@sha256:4b1e7958f820681b1b93b9cf9ea05a76e0785da12699a1fb1d05e0eb2137e56b
     container_name: db
     restart: unless-stopped
     networks: