diff --git a/__tests__/docker-tags.test.ts b/__tests__/docker-tags.test.ts
index 10adb2b..91a4344 100644
--- a/__tests__/docker-tags.test.ts
+++ b/__tests__/docker-tags.test.ts
@@ -3,13 +3,13 @@ import {UPDATER_IMAGE_NAME, PROXY_IMAGE_NAME} from '../src/docker-tags'
 describe('Docker tags', () => {
   test('UPDATER_IMAGE_NAME', () => {
     expect(UPDATER_IMAGE_NAME).toMatch(
-      /^docker\.pkg\.github\.com\/dependabot\/dependabot-updater:v1$/
+      /^docker\.pkg\.github\.com\/dependabot\/dependabot-updater@sha256:[a-zA-Z0-9]{64}$/
     )
   })
 
   test('PROXY_IMAGE_NAME', () => {
     expect(PROXY_IMAGE_NAME).toMatch(
-      /^docker\.pkg\.github\.com\/github\/dependabot-update-job-proxy:v1$/
+      /^docker\.pkg\.github\.com\/github\/dependabot-update-job-proxy@sha256:[a-zA-Z0-9]{64}$/
     )
   })
 })
diff --git a/dist/main/index.js b/dist/main/index.js
index 0e18979..5516d0b 100644
--- a/dist/main/index.js
+++ b/dist/main/index.js
@@ -5,7 +5,7 @@ require('./sourcemap-register.js');/******/ (() => { // webpackBootstrap
 /***/ ((module) => {
 
 "use strict";
-module.exports = JSON.parse('{"proxy":"docker.pkg.github.com/github/dependabot-update-job-proxy:v1","updater":"docker.pkg.github.com/dependabot/dependabot-updater:v1"}');
+module.exports = JSON.parse('{"proxy":"docker.pkg.github.com/github/dependabot-update-job-proxy@sha256:79b4f9cd5cd93062ee3403c71bbc5ca1939b8fc27f88cf705d6604b738b0c907","updater":"docker.pkg.github.com/dependabot/dependabot-updater@sha256:58e10e8dad0e79c532fe439161857c09da0ce4f8bbabbe216cd87dd35a39573b"}');
 
 /***/ }),
 
diff --git a/docker/Dockerfile.proxy b/docker/Dockerfile.proxy
index ae1499e..d9d9aed 100644
--- a/docker/Dockerfile.proxy
+++ b/docker/Dockerfile.proxy
@@ -1 +1 @@
-FROM docker.pkg.github.com/github/dependabot-update-job-proxy:v1
+FROM docker.pkg.github.com/github/dependabot-update-job-proxy@sha256:79b4f9cd5cd93062ee3403c71bbc5ca1939b8fc27f88cf705d6604b738b0c907
diff --git a/docker/Dockerfile.updater b/docker/Dockerfile.updater
index c8baac3..49c7e96 100644
--- a/docker/Dockerfile.updater
+++ b/docker/Dockerfile.updater
@@ -1 +1 @@
-FROM docker.pkg.github.com/dependabot/dependabot-updater:v1
+FROM docker.pkg.github.com/dependabot/dependabot-updater@sha256:58e10e8dad0e79c532fe439161857c09da0ce4f8bbabbe216cd87dd35a39573b
diff --git a/docker/containers.json b/docker/containers.json
index 7522784..0653cdd 100644
--- a/docker/containers.json
+++ b/docker/containers.json
@@ -1,4 +1,4 @@
 {
-  "proxy": "docker.pkg.github.com/github/dependabot-update-job-proxy:v1",
-  "updater": "docker.pkg.github.com/dependabot/dependabot-updater:v1"
+  "proxy": "docker.pkg.github.com/github/dependabot-update-job-proxy@sha256:79b4f9cd5cd93062ee3403c71bbc5ca1939b8fc27f88cf705d6604b738b0c907",
+  "updater": "docker.pkg.github.com/dependabot/dependabot-updater@sha256:58e10e8dad0e79c532fe439161857c09da0ce4f8bbabbe216cd87dd35a39573b"
 }
\ No newline at end of file