diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index 23410e25..cdf85a50 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -6,7 +6,7 @@ on: [push]
 jobs:
   build-and-publish:
     runs-on: docker
-    container: git.snaile.de/snailed/xbps-builder:2024.4.2029
+    container: git.snaile.de/snailed/xbps-builder:2024.4.2029@sha256:89d1763608330cb72aa3253c5f0416daf779ff26dda1ac1d1de0b424a7d43162
     env:
       LICENSE: "GPL-3.0"
       SHORT_DESCRIPTION: "Tokyonight GTK Theme"
@@ -15,7 +15,7 @@ jobs:
       ARCH: "x86_64"
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://code.forgejo.org/actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           submodules: true