diff --git a/.gitea/workflows/node-npm.yaml b/.gitea/workflows/node-npm.yaml
index 5edd938..ed22dec 100644
--- a/.gitea/workflows/node-npm.yaml
+++ b/.gitea/workflows/node-npm.yaml
@@ -13,11 +13,11 @@ jobs:
   build:
     name: Build and push image
     runs-on: ubuntu-latest
-    container: catthehacker/ubuntu:act-latest
+    container: catthehacker/ubuntu:act-latest@sha256:cfc3a7d39de50d5414ef460ba0e1fbf3acc7296b15df49e33d32a10ed39ab874
 
     steps:
     - name: Build Docker image
-      uses: https://git.kjan.de/actions/docker-build@v1
+      uses: https://git.kjan.de/actions/docker-build@68135ac7b8ac655fd9fc07cdf0486b6b3a184a97 # v1
       with:
         name: node-npm      
         REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
diff --git a/.gitea/workflows/node-ssh.yaml b/.gitea/workflows/node-ssh.yaml
index c21ca3d..49b9bfa 100644
--- a/.gitea/workflows/node-ssh.yaml
+++ b/.gitea/workflows/node-ssh.yaml
@@ -13,11 +13,11 @@ jobs:
   build:
     name: Build and push image
     runs-on: ubuntu-latest
-    container: catthehacker/ubuntu:act-latest
+    container: catthehacker/ubuntu:act-latest@sha256:cfc3a7d39de50d5414ef460ba0e1fbf3acc7296b15df49e33d32a10ed39ab874
 
     steps:
     - name: Build Docker image
-      uses: https://git.kjan.de/actions/docker-build@v1
+      uses: https://git.kjan.de/actions/docker-build@68135ac7b8ac655fd9fc07cdf0486b6b3a184a97 # v1
       with:
         name: node-ssh      
         REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
diff --git a/.gitea/workflows/php-8.2.yaml b/.gitea/workflows/php-8.2.yaml
index 94c9498..6411464 100644
--- a/.gitea/workflows/php-8.2.yaml
+++ b/.gitea/workflows/php-8.2.yaml
@@ -13,11 +13,11 @@ jobs:
   build:
     name: Build and push image
     runs-on: ubuntu-latest
-    container: catthehacker/ubuntu:act-latest
+    container: catthehacker/ubuntu:act-latest@sha256:cfc3a7d39de50d5414ef460ba0e1fbf3acc7296b15df49e33d32a10ed39ab874
 
     steps:
     - name: Build Docker image
-      uses: https://git.kjan.de/actions/docker-build@v1
+      uses: https://git.kjan.de/actions/docker-build@68135ac7b8ac655fd9fc07cdf0486b6b3a184a97 # v1
       with:
         name: php-8.2      
         REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
diff --git a/.gitea/workflows/php-deployer.yaml b/.gitea/workflows/php-deployer.yaml
index 5ee6fa1..6e28167 100644
--- a/.gitea/workflows/php-deployer.yaml
+++ b/.gitea/workflows/php-deployer.yaml
@@ -13,11 +13,11 @@ jobs:
   build:
     name: Build and push image
     runs-on: ubuntu-latest
-    container: catthehacker/ubuntu:act-latest
+    container: catthehacker/ubuntu:act-latest@sha256:cfc3a7d39de50d5414ef460ba0e1fbf3acc7296b15df49e33d32a10ed39ab874
 
     steps:
     - name: Build Docker image
-      uses: https://git.kjan.de/actions/docker-build@v1
+      uses: https://git.kjan.de/actions/docker-build@68135ac7b8ac655fd9fc07cdf0486b6b3a184a97 # v1
       with:
         name: php-deployer      
         REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
diff --git a/.gitea/workflows/rust-node.yaml b/.gitea/workflows/rust-node.yaml
index caa3e14..6223777 100644
--- a/.gitea/workflows/rust-node.yaml
+++ b/.gitea/workflows/rust-node.yaml
@@ -13,11 +13,11 @@ jobs:
   build:
     name: Build and push image
     runs-on: ubuntu-latest
-    container: catthehacker/ubuntu:act-latest
+    container: catthehacker/ubuntu:act-latest@sha256:cfc3a7d39de50d5414ef460ba0e1fbf3acc7296b15df49e33d32a10ed39ab874
 
     steps:
     - name: Build Docker image
-      uses: https://git.kjan.de/actions/docker-build@v1
+      uses: https://git.kjan.de/actions/docker-build@68135ac7b8ac655fd9fc07cdf0486b6b3a184a97 # v1
       with:
         name: rust-node      
         REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
diff --git a/.gitea/workflows/zmk-builder.yaml b/.gitea/workflows/zmk-builder.yaml
index d4a6ab8..04f727a 100644
--- a/.gitea/workflows/zmk-builder.yaml
+++ b/.gitea/workflows/zmk-builder.yaml
@@ -13,11 +13,11 @@ jobs:
   build:
     name: Build and push image
     runs-on: ubuntu-latest
-    container: catthehacker/ubuntu:act-latest
+    container: catthehacker/ubuntu:act-latest@sha256:cfc3a7d39de50d5414ef460ba0e1fbf3acc7296b15df49e33d32a10ed39ab874
 
     steps:
     - name: Build Docker image
-      uses: https://git.kjan.de/actions/docker-build@v1
+      uses: https://git.kjan.de/actions/docker-build@68135ac7b8ac655fd9fc07cdf0486b6b3a184a97 # v1
       with:
         name: zmk-builder      
         REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
diff --git a/images/actions/node-npm/Dockerfile b/images/actions/node-npm/Dockerfile
index b545ca9..cf135e0 100644
--- a/images/actions/node-npm/Dockerfile
+++ b/images/actions/node-npm/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine
+FROM alpine@sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5
 
 RUN apk add nodejs git curl npm bash sudo
 
diff --git a/images/actions/node-ssh/Dockerfile b/images/actions/node-ssh/Dockerfile
index 6cbeeb1..9786576 100644
--- a/images/actions/node-ssh/Dockerfile
+++ b/images/actions/node-ssh/Dockerfile
@@ -1,4 +1,4 @@
-FROM shivammathur/node
+FROM shivammathur/node@sha256:6aa327e22cb4939c36cac2db5876003ae594e0ecb349c6981a898a3c6ebb8575
 
 RUN apt-get update
 RUN apt-get install openssh-client -y
diff --git a/images/actions/php-8.2/Dockerfile b/images/actions/php-8.2/Dockerfile
index ec0b990..081ec4a 100644
--- a/images/actions/php-8.2/Dockerfile
+++ b/images/actions/php-8.2/Dockerfile
@@ -1,4 +1,4 @@
-FROM php:8.2-alpine
+FROM php:8.2-alpine@sha256:09ffc3f76403029a2426dfac2712acd96b17700a75c258561717d30e46df8096
 
 RUN apk add nodejs git curl composer bash sudo
 
diff --git a/images/actions/php-deployer/Dockerfile b/images/actions/php-deployer/Dockerfile
index 98d4395..ebd5884 100644
--- a/images/actions/php-deployer/Dockerfile
+++ b/images/actions/php-deployer/Dockerfile
@@ -1,3 +1,3 @@
-FROM minkbear/php-deployer
+FROM minkbear/php-deployer@sha256:c57d8994cd609e42128144ed113abf2afce389a69b3a6d1bdff3c7734ee1d33c
 
 RUN apk add nodejs sudo
diff --git a/images/actions/rust-node/Dockerfile b/images/actions/rust-node/Dockerfile
index 8df3ea9..f67b4c6 100644
--- a/images/actions/rust-node/Dockerfile
+++ b/images/actions/rust-node/Dockerfile
@@ -1,4 +1,4 @@
-FROM rust
+FROM rust@sha256:29fe4376919e25b7587a1063d7b521d9db735fc137d3cf30ae41eb326d209471
 
 RUN apt update
 RUN apt install nodejs -y
diff --git a/images/actions/zmk-builder/Dockerfile b/images/actions/zmk-builder/Dockerfile
index 586fef8..a4ac780 100644
--- a/images/actions/zmk-builder/Dockerfile
+++ b/images/actions/zmk-builder/Dockerfile
@@ -1,4 +1,4 @@
-FROM zmkfirmware/zmk-build-arm:stable
+FROM zmkfirmware/zmk-build-arm:stable@sha256:0979a8de325e3d822e48bd8d1d9efaee2984ad3750253119f920a342f0ce5cde
 
 RUN apt-get update
 RUN apt-get install --yes --no-install-recommends nodejs zstd zip