diff --git a/commafeed-server/src/main/docker/Dockerfile.jvm b/commafeed-server/src/main/docker/Dockerfile.jvm
index 4ce6a9b6..41de0797 100644
--- a/commafeed-server/src/main/docker/Dockerfile.jvm
+++ b/commafeed-server/src/main/docker/Dockerfile.jvm
@@ -1,4 +1,4 @@
-FROM ibm-semeru-runtimes:open-21.0.6_7-jre
+FROM ibm-semeru-runtimes:open-21.0.6_7-jre@sha256:18c1cdb7414322fc5fe21b1fc56e4072c53ef59365e4ed19d6a64c50db4e79ee
 EXPOSE 8082
 
 RUN mkdir -p /commafeed/data
diff --git a/commafeed-server/src/main/docker/Dockerfile.native b/commafeed-server/src/main/docker/Dockerfile.native
index c552cc3a..4046ae5d 100644
--- a/commafeed-server/src/main/docker/Dockerfile.native
+++ b/commafeed-server/src/main/docker/Dockerfile.native
@@ -1,4 +1,4 @@
-FROM debian:12.9
+FROM debian:12.9@sha256:35286826a88dc879b4f438b645ba574a55a14187b483d09213a024dc0c0a64ed
 ARG TARGETARCH
 
 EXPOSE 8082