diff --git a/.woodpecker/build_publish.yml b/.woodpecker/build_publish.yml
index 8045030..681bcce 100644
--- a/.woodpecker/build_publish.yml
+++ b/.woodpecker/build_publish.yml
@@ -4,12 +4,12 @@ when:
 
 steps:
     build_package:
-        image: git.verdigado.com/verdigado-public/krankerl_docker:latest
+        image: git.verdigado.com/verdigado-public/krankerl_docker:latest@sha256:d5a385f4e6cd27bbd5e0e196b12e9280ae6931909a3305acadbf50fad620e0d0
         pull: true
         commands:
             - krankerl package
     git_release:
-        image: woodpeckerci/plugin-gitea-release
+        image: woodpeckerci/plugin-gitea-release@sha256:632b7e10918e947029841ace505b9b9d14efd4062ac0e19d3ae38b33458da678
         settings:
             base_url: https://git.verdigado.com
             title: ${CI_COMMIT_TAG##refs/tags/}
@@ -20,7 +20,7 @@ steps:
             target: main
             file-exists: fail
     release:
-        image: git.verdigado.com/verdigado-public/krankerl_docker:latest
+        image: git.verdigado.com/verdigado-public/krankerl_docker:latest@sha256:d5a385f4e6cd27bbd5e0e196b12e9280ae6931909a3305acadbf50fad620e0d0
         commands:
             - krankerl login --appstore "$${NEXTCLOUD_APPSTORE_TOKEN}"
             - mkdir -p ~/.nextcloud/certificates/