diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index 035df8a..61422f0 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -10,7 +10,7 @@ on:
 jobs:
   build-and-publish:
     runs-on: docker
-    container: git.snaile.de/snailed/xbps-builder:2024.4.2019
+    container: git.snaile.de/snailed/xbps-builder:2024.4.2019@sha256:c69bcb9da724a31d9c1fff36fa6dc8f363b2d9f2470d3ec7887a0905c84b66ea
     env:
       LICENSE: "GPL-2.0"
       SHORT_DESCRIPTION: "Customized dwmblocks-async"
@@ -19,7 +19,7 @@ jobs:
       ARCH: "x86_64"
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://code.forgejo.org/actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           submodules: true