diff --git a/.woodpecker/pr.yml b/.woodpecker/pr.yml
index f78bbd7..c05abc5 100644
--- a/.woodpecker/pr.yml
+++ b/.woodpecker/pr.yml
@@ -1,7 +1,7 @@
 ---
 steps:
   pr-lint:
-    image: alpine/helm
+    image: alpine/helm@sha256:b97ba4f9b27fe7af16ee3d37e6815783c9d4a51289b6240a9024ec471611ae9b
     environment:
       USE_SSH: "true"
       GIT_USER: $DRONE_COMMIT_AUTHOR
diff --git a/.woodpecker/release.yml b/.woodpecker/release.yml
index c4dd467..c803446 100644
--- a/.woodpecker/release.yml
+++ b/.woodpecker/release.yml
@@ -1,7 +1,7 @@
 ---
 steps:
   helm-repo:
-    image: quay.io/helmpack/chart-releaser
+    image: quay.io/helmpack/chart-releaser@sha256:4ba13e667228d4a2b7a409e3787ca8b4413ff6e8b1306784d240c954f26bec2e
     commands:
     - git config --global user.email "noreply@lib42.github.io"
     - git config --global user.name "Woodpecker-CI"
diff --git a/charts/ara/values.yaml b/charts/ara/values.yaml
index 4500a18..395977a 100644
--- a/charts/ara/values.yaml
+++ b/charts/ara/values.yaml
@@ -1,5 +1,5 @@
 # Values for lib42/ara Helm Chart
-image: docker.io/recordsansible/ara-api:latest
+image: docker.io/recordsansible/ara-api:latest@sha256:9dfd6e18f474c2437081a0397310a264aa368b8364aea772c3b5b22bdd788cf5
 pullPolicy: IfNotPresent
 
 replicas: 1