diff --git a/.drone.yml b/.drone.yml
index ea02041..b2bbd15 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -3,7 +3,7 @@ kind: pipeline
 name: deploy to swarm-test.autonomic.zone
 steps:
 - name: deployment
-  image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
+  image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest@sha256:fc1fa69bea5528db7ba184297735ac1bbd278720910e4cb1f502de9aee14e228
   settings:
     host: swarm-test.autonomic.zone
     stack: garage
@@ -28,7 +28,7 @@ kind: pipeline
 name: generate recipe catalogue
 steps:
 - name: release a new version
-  image: plugins/downstream
+  image: plugins/downstream@sha256:03ff02d8a5637ea5197fa08929a91dfeeb5e30b1da62b82b6c2a895b170338ca
   settings:
     server: https://build.coopcloud.tech
     token:
diff --git a/compose.yml b/compose.yml
index 2b6520a..5fc92e5 100644
--- a/compose.yml
+++ b/compose.yml
@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: dxflrs/garage:v2.4.0
+    image: dxflrs/garage:v2.4.0@sha256:715d176efc35384bf72cf6052fd61b74b3e27a1e31a9dfedabe646bd1e92f137
     hostname: "${DOMAIN}"
     configs:
       - source: garage_conf