diff --git a/.woodpecker/pr.yml b/.woodpecker/pr.yml
index f78bbd7..0e83ec4 100644
--- a/.woodpecker/pr.yml
+++ b/.woodpecker/pr.yml
@@ -1,7 +1,7 @@
 ---
 steps:
   pr-lint:
-    image: alpine/helm
+    image: alpine/helm@sha256:105741fa6621ed9a3ea944066de78bb27d4b9bb93a56ce8e7cb4d621e1e4bbf2
     environment:
       USE_SSH: "true"
       GIT_USER: $DRONE_COMMIT_AUTHOR
diff --git a/.woodpecker/release.yml b/.woodpecker/release.yml
index d33d7f4..45c486e 100644
--- a/.woodpecker/release.yml
+++ b/.woodpecker/release.yml
@@ -1,7 +1,7 @@
 ---
 steps:
   helm-repo:
-    image: quay.io/helmpack/chart-releaser
+    image: quay.io/helmpack/chart-releaser@sha256:b62aa9ed58cf0e6a868d895b5c4ecf0f5ed9c1b2b10cfcf90c9c665128d01cdd
     commands:
     - git config --global user.email "noreply@lib42.github.io"
     - git config --global user.name "Woodpecker-CI"