diff --git a/.drone.yml b/.drone.yml
index 15b79f9..88db756 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -8,7 +8,7 @@ trigger:
 
 steps:
   - name: python3.8
-    image: docker.mafyuh.xyz/python:3.8-slim-bullseye
+    image: docker.mafyuh.xyz/python:3.8-slim-bullseye@sha256:71b3586e3f67d9786a41ffb78b3c4b550b30ee313ff6b00ccfa37b254cc487ba
     commands:
       - "python3 --version"
       - "pip3 install yamllint"
@@ -17,7 +17,7 @@ steps:
       - 'find . -name "*.yaml" ! -name ".drone.yml" -exec yamllint -d "{extends: relaxed, rules: {line-length: {max: 120}}}" {} +'
 
   - name: python3.10
-    image: docker.mafyuh.xyz/python:3.9-slim-bullseye
+    image: docker.mafyuh.xyz/python:3.9-slim-bullseye@sha256:7f8e99522226c0813486f22952204df889a8d90a74a6f7ad78def0f1130d9a0e
     commands:
       - "python3 --version"
       - "pip3 install yamllint"
@@ -26,7 +26,7 @@ steps:
       - 'find . -name "*.yaml" ! -name ".drone.yml" -exec yamllint -d "{extends: relaxed, rules: {line-length: {max: 120}}}" {} +'
 
   - name: python3.12
-    image: docker.mafyuh.xyz/python:3.10-slim-bullseye
+    image: docker.mafyuh.xyz/python:3.10-slim-bullseye@sha256:74d4670541ba66c04de01bf367372fff1afa2ecd73604083b8eaafb54158d3d5
     commands:
       - "python3 --version"
       - "pip3 install yamllint"
diff --git a/AI/docker-compose.yml b/AI/docker-compose.yml
index f318086..d349241 100644
--- a/AI/docker-compose.yml
+++ b/AI/docker-compose.yml
@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   ollama:
-    image: docker.mafyuh.xyz/ollama/ollama:0.1.36
+    image: docker.mafyuh.xyz/ollama/ollama:0.1.36@sha256:0f9cdb2eac96c6002856fc83ed5f6c0170b090a747552620283986060ffb1532
     container_name: ollama
     restart: unless-stopped
     volumes:
@@ -18,7 +18,7 @@ services:
               capabilities: [gpu]
 
   open-webui:
-    image: ghcr.io/open-webui/open-webui:v0.1.124
+    image: ghcr.io/open-webui/open-webui:v0.1.124@sha256:a337a488220c0b20a6f896ccd425d5fccbb9d6b4848453435982902c8d7996d9
     container_name: open-webui
     restart: unless-stopped
     ports:
diff --git a/ap/docker-compose.yml b/ap/docker-compose.yml
index 3dec2eb..9b8eff5 100644
--- a/ap/docker-compose.yml
+++ b/ap/docker-compose.yml
@@ -15,7 +15,7 @@ services:
     networks:
       - activepieces
   postgres:
-    image: 'postgres:14.4'
+    image: 'postgres:14.4@sha256:9ceb24f8c5f15c053d973a3610866f473690875dc13eb3282b45302189321040'
     container_name: postgres
     restart: unless-stopped
     environment:
@@ -27,7 +27,7 @@ services:
     networks:
       - activepieces
   redis:
-    image: 'redis:7.0.7'
+    image: 'redis:7.0.7@sha256:bb474c35022ca2c5618f4c49ca759bd2c0eea1daf5d934c560bd30092b97b498'
     container_name: redis
     restart: unless-stopped
     volumes:
diff --git a/authentik/docker-compose.yml b/authentik/docker-compose.yml
index 45590e2..a91a63f 100644
--- a/authentik/docker-compose.yml
+++ b/authentik/docker-compose.yml
@@ -3,7 +3,7 @@ version: "3.4"
 
 services:
   postgresql:
-    image: docker.io/library/postgres:12-alpine
+    image: docker.io/library/postgres:12-alpine@sha256:862ab45cefd07fca01114909b19a7f786c35a2e4333a574589873d21cdc95554
     restart: unless-stopped
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
@@ -20,7 +20,7 @@ services:
     env_file:
       - .env
   redis:
-    image: docker.io/library/redis:alpine
+    image: docker.io/library/redis:alpine@sha256:a40e29800d387e3cf9431902e1e7a362e4d819233d68ae39380532c3310091ac
     command: --save 60 1 --loglevel warning
     restart: unless-stopped
     healthcheck:
diff --git a/downloaders/docker-compose.yml b/downloaders/docker-compose.yml
index f599d16..1deeb90 100644
--- a/downloaders/docker-compose.yml
+++ b/downloaders/docker-compose.yml
@@ -1,7 +1,7 @@
 version: '3.9'
 services:
   sabnzbd:
-    image: ghcr.io/linuxserver/sabnzbd:4.3.1-ls160
+    image: ghcr.io/linuxserver/sabnzbd:4.3.1-ls160@sha256:8ee3019ca921f6c46294f2e363453fa41875d309c7e68028a73f8169eb35a691
     container_name: sabnzbd
     environment:
       - PUID=1000
diff --git a/drone/docker-compose.yml b/drone/docker-compose.yml
index d84c30a..bc69e0f 100644
--- a/drone/docker-compose.yml
+++ b/drone/docker-compose.yml
@@ -2,7 +2,7 @@ version: '3'
 
 services:
   drone:
-    image: docker.mafyuh.xyz/drone/drone:2.23.0
+    image: docker.mafyuh.xyz/drone/drone:2.23.0@sha256:addf5266264073e411a472964fabc5a56be775fc92d6c3059c9756add690ddce
     environment:
       - DRONE_GITEA_CLIENT_ID=$DRONE_GITEA_CLIENT_ID
       - DRONE_GITEA_CLIENT_SECRET=$DRONE_GITEA_CLIENT_SECRET