diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1d6856a..01e1c40 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     container:
-      image: quay.io/centos-boot/builder:latest
+      image: quay.io/centos-boot/builder:latest@sha256:a56f67a2fd83f69b0561bb551d0a317d93052d73e41a7e1610c01f43c7dca6bd
       options: --privileged
 
     strategy:
diff --git a/.github/workflows/publish-image.yml b/.github/workflows/publish-image.yml
index 074774a..652b7e5 100644
--- a/.github/workflows/publish-image.yml
+++ b/.github/workflows/publish-image.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
 
     container:
-      image: quay.io/centos-boot/builder:latest
+      image: quay.io/centos-boot/builder:latest@sha256:a56f67a2fd83f69b0561bb551d0a317d93052d73e41a7e1610c01f43c7dca6bd
       options: --privileged
 
     strategy: