diff --git a/cmd/server/Dockerfile b/cmd/server/Dockerfile
index 55890a0..acdf74d 100644
--- a/cmd/server/Dockerfile
+++ b/cmd/server/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:latest as builder
+FROM golang:latest@sha256:672a2286da3ee7a854c3e0a56e0838918d0dbb1c18652992930293312de898a6 as builder
 
 ENV CGO_ENABLED=0
 
@@ -18,7 +18,7 @@
 WORKDIR /go/src/gomodules.avm99963.com/twpt-server/cmd/server
 RUN go install gomodules.avm99963.com/twpt-server/cmd/server
 
-FROM alpine
+FROM alpine@sha256:51b67269f354137895d43f3b3d810bfacd3945438e94dc5ac55fdac340352f48
 LABEL maintainer "me@avm99963.com"
 
 RUN apk add --no-cache tini