diff --git a/.woodpecker/pr.yml b/.woodpecker/pr.yml
index f78bbd7..7d21a65 100644
--- a/.woodpecker/pr.yml
+++ b/.woodpecker/pr.yml
@@ -1,7 +1,7 @@
 ---
 steps:
   pr-lint:
-    image: alpine/helm
+    image: alpine/helm@sha256:adb87b125214fd356ecc1a24a1e86e4afed0ee03de5d4391de4925777de7fd42
     environment:
       USE_SSH: "true"
       GIT_USER: $DRONE_COMMIT_AUTHOR
diff --git a/.woodpecker/release.yml b/.woodpecker/release.yml
index c4dd467..c803446 100644
--- a/.woodpecker/release.yml
+++ b/.woodpecker/release.yml
@@ -1,7 +1,7 @@
 ---
 steps:
   helm-repo:
-    image: quay.io/helmpack/chart-releaser
+    image: quay.io/helmpack/chart-releaser@sha256:4ba13e667228d4a2b7a409e3787ca8b4413ff6e8b1306784d240c954f26bec2e
     commands:
     - git config --global user.email "noreply@lib42.github.io"
     - git config --global user.name "Woodpecker-CI"
diff --git a/charts/ara/values.yaml b/charts/ara/values.yaml
index 4500a18..34c3436 100644
--- a/charts/ara/values.yaml
+++ b/charts/ara/values.yaml
@@ -1,5 +1,5 @@
 # Values for lib42/ara Helm Chart
-image: docker.io/recordsansible/ara-api:latest
+image: docker.io/recordsansible/ara-api:latest@sha256:8774f1c567a57df1b7a5bf6a9627a42e99d90a5f9eae384e9641af67856832bf
 pullPolicy: IfNotPresent
 
 replicas: 1