diff --git a/.dev.Dockerfile b/.dev.Dockerfile
index 9ab90f9e..95704c75 100644
--- a/.dev.Dockerfile
+++ b/.dev.Dockerfile
@@ -1,4 +1,4 @@
-FROM cgr.dev/chainguard/go:1.25 AS builder
+FROM cgr.dev/chainguard/go:latest@sha256:3348f7dc08cebd3c933c92a2cbc734c31bab5993f4b8e8d56577ba58e85cd66e AS builder
 
 WORKDIR /app
 
diff --git a/.goreleaser.Dockerfile b/.goreleaser.Dockerfile
index 3a4fcdd5..308d0a9f 100644
--- a/.goreleaser.Dockerfile
+++ b/.goreleaser.Dockerfile
@@ -1,4 +1,4 @@
-FROM gcr.io/distroless/static-debian13:nonroot
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:d29e660cc75a5b6b1334e03c5c81ccf9bc0884a002c6000dbf0fb96034814478
 
 ARG TARGETPLATFORM
 COPY ${TARGETPLATFORM}/fga /fga