diff --git a/.woodpecker/pr.yml b/.woodpecker/pr.yml
index 48f0c64..fc14f61 100644
--- a/.woodpecker/pr.yml
+++ b/.woodpecker/pr.yml
@@ -1,7 +1,7 @@
 ---
 pipeline:
   pr-lint:
-    image: alpine/helm
+    image: alpine/helm@sha256:a3ed7baee851e9497a3a6bda8831115a1f28795b619f4e54ff47bae3c851d72c
     environment:
       USE_SSH: "true"
       GIT_USER: $DRONE_COMMIT_AUTHOR
diff --git a/.woodpecker/release.yml b/.woodpecker/release.yml
index bc913ef..e36412a 100644
--- a/.woodpecker/release.yml
+++ b/.woodpecker/release.yml
@@ -1,7 +1,7 @@
 ---
 pipeline:
   helm-repo:
-    image: quay.io/helmpack/chart-releaser
+    image: quay.io/helmpack/chart-releaser@sha256:86d1c7cea6bfd2f26f9620a17866ff05ed34149bb37e6f53f66679d0f843dce2
     commands:
     - git config --global user.email "noreply@lib42.github.io"
     - git config --global user.name "Woodpecker-CI"