diff --git a/Dockerfile b/Dockerfile
index 73c820b..61059ab 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:22-bookworm-slim AS runner
+FROM node:22-bookworm-slim@sha256:d415caac2f1f77b98caaf9415c5f807e14bc8d7bdea62561ea2fef4fbd08a73c AS runner
 # Node.js 22 (curently LTS)
 # Debian bookwork