diff --git a/.drone.yml b/.drone.yml
index 8139990..7f77a18 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -3,7 +3,7 @@ kind: pipeline
 name: deploy to swarm-test.autonomic.zone
 steps:
   - name: deployment
-    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
+    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest@sha256:fc1fa69bea5528db7ba184297735ac1bbd278720910e4cb1f502de9aee14e228
     settings:
       host: swarm-test.autonomic.zone
       stack: example_com  # UPDATE ME
@@ -26,7 +26,7 @@ kind: pipeline
 name: generate recipe catalogue
 steps:
   - name: release a new version
-    image: plugins/downstream
+    image: plugins/downstream@sha256:03ff02d8a5637ea5197fa08929a91dfeeb5e30b1da62b82b6c2a895b170338ca
     settings:
       server: https://build.coopcloud.tech
       token:
diff --git a/compose.yml b/compose.yml
index 2e697db..4cd7b39 100644
--- a/compose.yml
+++ b/compose.yml
@@ -1,7 +1,7 @@
 ---
 services:
   app:
-    image: openemr/openemr:7.0.3.4
+    image: openemr/openemr:7.0.3.4@sha256:978a4a2ff9652b3448053456756ae9a233c0035e554d6049f2e9b45d3b730ae3
     networks:
       - proxy
       - internal
@@ -52,7 +52,7 @@ services:
     depends_on:
       - db
   db:
-    image: "mariadb:11.4"
+    image: "mariadb:11.4@sha256:1292844148b311e4ed4300022a996d39083f415a963e970cf47cad1b3b18e3a6"
     environment:
       - MYSQL_DATABASE=openemr
       - MYSQL_USER=openemr