diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index af0b898..45832cf 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -10,7 +10,7 @@ on:
 jobs:
   build-and-publish:
     runs-on: docker
-    container: git.snaile.de/snailed/xbps-builder:2024.0502.1733
+    container: git.snaile.de/snailed/xbps-builder:2024.0502.1733@sha256:0ca263f8a97fbd29f88349e731153f60569d19ddd7320f2c7c80047a35260c9b
     env:
       LICENSE: "ISC"
       SHORT_DESCRIPTION: "Extremely minimalistic trash client"
@@ -19,7 +19,7 @@ jobs:
       ARCH: "x86_64"
     steps:
       - name: Checkout
-        uses: https://code.forgejo.org/actions/checkout@v4
+        uses: https://code.forgejo.org/actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
 
       - name: Generate tag and package name
         run: |