diff --git a/.drone.yml b/.drone.yml
index 44a6f81..b396a57 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -3,7 +3,7 @@ kind: pipeline
 name: deploy to swarm-test.autonomic.zone
 steps:
   - name: deployment
-    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
+    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest@sha256:fc1fa69bea5528db7ba184297735ac1bbd278720910e4cb1f502de9aee14e228
     settings:
       host: swarm-test.autonomic.zone
       stack: mattermost
@@ -17,7 +17,7 @@ steps:
       LETS_ENCRYPT_ENV: production
 
   - name: notify coopcloud-dev on failure
-    image: plugins/matrix
+    image: plugins/matrix@sha256:9202a26fbadeaa949c2ad0009aa5758277fb10b178f4909afc1d827d6456214e
     settings:
       homeserver: https://matrix.autonomic.zone
       roomid: "IFazIpLtxiScqbHqoa:autonomic.zone"
@@ -38,7 +38,7 @@ kind: pipeline
 name: generate recipe catalogue
 steps:
   - name: release a new version
-    image: plugins/downstream
+    image: plugins/downstream@sha256:03ff02d8a5637ea5197fa08929a91dfeeb5e30b1da62b82b6c2a895b170338ca
     settings:
       server: https://build.coopcloud.tech
       token:
diff --git a/compose.license.yml b/compose.license.yml
index fc35167..09e57b0 100644
--- a/compose.license.yml
+++ b/compose.license.yml
@@ -2,4 +2,4 @@ version: "3.8"
 
 services:
   app:
-    image: mattermost/mattermost-enterprise-edition:10.11.23
+    image: mattermost/mattermost-enterprise-edition:10.11.23@sha256:6f927863c529a246bb7c4c55156611306bae952142534fa39cb724d85f85769d
diff --git a/compose.yml b/compose.yml
index a9d90c3..0b5066c 100644
--- a/compose.yml
+++ b/compose.yml
@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   app:
-    image: mattermost/mattermost-team-edition:10.11.23
+    image: mattermost/mattermost-team-edition:10.11.23@sha256:1e6be48c49ccd4824cdbe045ac226b9c632ceaa30bf812ce70ca4de45cb86b9c
     environment:
       - TZ
       - MM_SQLSETTINGS_DRIVERNAME=postgres
@@ -44,7 +44,7 @@ services:
     entrypoint: /abra-mattermost-entrypoint.sh
 
   postgres:
-    image: pgautoupgrade/pgautoupgrade:18-alpine
+    image: pgautoupgrade/pgautoupgrade:18-alpine@sha256:2426484c3efdd6b7d67fe9e111017a4a1722367340197465de8fb2167238f2e2
     volumes:
       - postgres_data:/var/lib/postgresql/data
     environment: