diff --git a/.woodpecker/.test.yaml b/.woodpecker/.test.yaml
index 69c9a51..b63c742 100644
--- a/.woodpecker/.test.yaml
+++ b/.woodpecker/.test.yaml
@@ -7,7 +7,7 @@ variables:
   - &image 'git.verdigado.com/verdigado-images/container-pre-commit:${CI_COMMIT_SHA}'
 steps:
   await-image:
-    image: alpine
+    image: alpine@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
     environment:
       IMAGE: *image
     commands:
@@ -16,7 +16,7 @@ steps:
       - echo 'found.'
 
   clone salt:
-    image: woodpeckerci/plugin-git
+    image: woodpeckerci/plugin-git@sha256:7af90de3a9aa5dc93cc0d5cd2e67e28cb237d4b8e891ccacfd9031f78f4b05a8
     settings:
       remote: https://git.verdigado.com/verdigado-Privileged/Salt.git
       path: salt
@@ -36,7 +36,7 @@ steps:
       - pre-commit run --all-files
 
   clone rocketchat2matrix:
-    image: woodpeckerci/plugin-git
+    image: woodpeckerci/plugin-git@sha256:7af90de3a9aa5dc93cc0d5cd2e67e28cb237d4b8e891ccacfd9031f78f4b05a8
     settings:
       remote: https://git.verdigado.com/NB-Public/rocketchat2matrix.git
       path: rocketchat2matrix
diff --git a/Dockerfile b/Dockerfile
index 9991bd2..e988a6a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,11 +1,11 @@
-FROM python:3.12.4-alpine3.20@sha256:a982997504b8ec596f553d78f4de4b961bbdf5254e0177f6e99bb34f4ef16f95
+FROM python:3.12.4-alpine3.20@sha256:dc095966439c68283a01dde5e5bc9819ba24b28037dddd64ea224bf7aafc0c82
 
 # renovate: datasource=repology depName=alpine_3_20/build-base versioning=loose
 ENV BUILD_BASE_VERSION="0.5-r3"
 # renovate: datasource=repology depName=alpine_3_20/gcc versioning=loose
 ENV GCC_VERSION="13.2.1_git20240309-r0"
 # renovate: datasource=repology depName=alpine_3_20/ruby versioning=loose
-ENV RUBY_VERSION="3.3.1-r0"
+ENV RUBY_VERSION="3.3.3-r0"
 # renovate: datasource=repology depName=alpine_3_20/git versioning=loose
 ENV GIT_VERSION="2.45.2-r0"
 # renovate: datasource=repology depName=alpine_3_20/openssh-keygen versioning=loose