diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index d9dfba4..e20b420 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -6,7 +6,7 @@ on: [push]
 jobs:
   build-and-publish:
     runs-on: docker
-    container: git.snaile.de/snailed/xbps-builder:2024.4.2019
+    container: git.snaile.de/snailed/xbps-builder:2024.4.2019@sha256:c69bcb9da724a31d9c1fff36fa6dc8f363b2d9f2470d3ec7887a0905c84b66ea
     env:
       LICENSE: "GPL-2.0"
       SHORT_DESCRIPTION: "Customized dwmblocks-async"
@@ -15,7 +15,7 @@ jobs:
       ARCH: "x86_64"
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://code.forgejo.org/actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           submodules: true