diff --git a/.woodpecker.yml b/.woodpecker.yml
index 62e84baa..fba47a7c 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -2,14 +2,14 @@ when:
   event: tag
 steps:
   build:
-    image: alpine
+    image: alpine@sha256:77726ef6b57ddf65bb551896826ec38bc3e53f75cdde31354fbffb4f25238ebd
     commands: |
       apk add bash make sassc glib-dev gdk-pixbuf libxml2-utils gtk-murrine-engine rsvg-convert librsvg
       mkdir -p pkg/usr/share/themes
       oomox-gtk-theme/change_color.sh -t pkg/usr/share/themes -o tokyonight -d true ./tokyonight
 
   package-xbps:
-    image: ghcr.io/void-linux/void-musl-busybox
+    image: ghcr.io/void-linux/void-musl-busybox@sha256:6c96b0ae5e1832e9bacaf3a77d51935a96454e1c13ef227998557506991d6f29
     environment:
       - LICENSE=GPL-3.0
       - SHORT_DESCRIPTION=Tokyonight GTK Theme
@@ -24,12 +24,12 @@ steps:
                   "$${CI_WORKSPACE}/pkg"
 
   package-targz:
-    image: alpine
+    image: alpine@sha256:77726ef6b57ddf65bb551896826ec38bc3e53f75cdde31354fbffb4f25238ebd
     commands: |
       tar czf $${CI_REPO_NAME}-$${CI_COMMIT_TAG}.tar.gz --directory=$${CI_WORKSPACE}/pkg .
 
   publish:
-    image: woodpeckerci/plugin-gitea-release
+    image: woodpeckerci/plugin-gitea-release@sha256:d778df013539760834d6dccfed940352432dfb56961266ecdd8fd46d498e22f8
     settings:
       base_url: https://git.snaile.de
       files:
@@ -39,7 +39,7 @@ steps:
       target: main
 
   publish-xbps:
-    image: ghcr.io/void-linux/void-musl-busybox
+    image: ghcr.io/void-linux/void-musl-busybox@sha256:6c96b0ae5e1832e9bacaf3a77d51935a96454e1c13ef227998557506991d6f29
     environment:
       - XBPS_TARGET_ARCH=x86_64
     secrets: