diff --git a/Dockerfile b/Dockerfile
index e49dcd3..ed01442 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-ARG BASE_IMAGE=libops/wp:nginx-1.30.3-php84
+ARG BASE_IMAGE=libops/wp:nginx-1.30.3-php84@sha256:2e362a006160a8e95f33bd64c2bc55022b633f12579c353ff63c8f20efefe9a3
 FROM ${BASE_IMAGE}
 
 ARG TARGETARCH
diff --git a/docker-compose.yaml b/docker-compose.yaml
index dfce14c..6ffb3ea 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -55,7 +55,7 @@ services:
         condition: service_healthy
 
   init:
-    image: libops/base:3.2.2.0
+    image: libops/base:3.2.2.0@sha256:60c788c0dcf1fed021ee17d2847a45dde2b559ecef19b5fa11c2314356976ba9
     restart: no
     working_dir: /var/www/bedrock
     volumes: