diff --git a/.github/workflows/deply.yml b/.github/workflows/deply.yml
index ba10a5207..62fdc94b3 100644
--- a/.github/workflows/deply.yml
+++ b/.github/workflows/deply.yml
@@ -11,7 +11,7 @@ jobs:
     concurrency: deploy-group # this ensures only one action run at a time
     steps:
       - name: ⬇️Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: 📠 Setup flyctl
         uses: superfly/flyctl-actions/setup-flyctl@master
diff --git a/apps/web/Dockerfile b/apps/web/Dockerfile
index d5377e222..7d33f2e3e 100644
--- a/apps/web/Dockerfile
+++ b/apps/web/Dockerfile
@@ -1,5 +1,5 @@
 # base node image
-FROM node:21-alpine3.19 AS base
+FROM node:21-alpine3.19@sha256:d3271e4bd89eec4d97087060fd4db0c238d9d22fcfad090a73fa9b5128699888 AS base
 
 LABEL authors="suddenlyGiovanni"