diff --git a/Dockerfile b/Dockerfile
index 79fab38..61fd4c4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.23-alpine3.20@sha256:9a31ef0803e6afdf564edc8ba4b4e17caed22a0b1ecd2c55e3c8fdd8d8f68f98
+FROM golang:1.23-alpine3.20@sha256:def59a601e724ddac5139d447e8e9f7d0aeec25db287a9ee1615134bcda266e2
 
 SHELL ["/bin/ash", "-o", "pipefail", "-c"]
 
diff --git a/examples/imagemagick/Dockerfile b/examples/imagemagick/Dockerfile
index e0bda4f..df2a505 100644
--- a/examples/imagemagick/Dockerfile
+++ b/examples/imagemagick/Dockerfile
@@ -1,6 +1,6 @@
 ARG TAG=main
 ARG DOCKER_REPOSITORY=lehighlts
-FROM islandora/imagemagick:alpine-3.20.2-imagemagick-7.1.1.36-r0 AS imagemagick
+FROM islandora/imagemagick:alpine-3.20.2-imagemagick-7.1.1.36-r0@sha256:a1fa03a18e7e232e380d070d196dc2c0e0a8762dd385640b932e28fcacfd9b05 AS imagemagick
 FROM ${DOCKER_REPOSITORY}/scyllaridae:${TAG}
 
 SHELL ["/bin/ash", "-o", "pipefail", "-c"]
diff --git a/examples/mergepdf/Dockerfile b/examples/mergepdf/Dockerfile
index cc26dad..6e48758 100644
--- a/examples/mergepdf/Dockerfile
+++ b/examples/mergepdf/Dockerfile
@@ -1,6 +1,6 @@
 ARG TAG=main
 ARG DOCKER_REPOSITORY=lehighlts
-FROM islandora/leptonica:alpine-3.20.2-leptonica-1.84.1-r0 AS leptonica
+FROM islandora/leptonica:alpine-3.20.2-leptonica-1.84.1-r0@sha256:9e9e46a328d8b55a61a352a6b06ff175f98e40cd5773c9bf93aac58fb56b65f7 AS leptonica
 FROM ${DOCKER_REPOSITORY}/scyllaridae-imagemagick:${TAG} AS scyllaridae
 
 RUN --mount=type=bind,from=leptonica,source=/packages,target=/packages \
diff --git a/examples/openai-htr/Dockerfile b/examples/openai-htr/Dockerfile
index ffb1eab..2b95850 100644
--- a/examples/openai-htr/Dockerfile
+++ b/examples/openai-htr/Dockerfile
@@ -1,6 +1,6 @@
 ARG TAG=main
 ARG DOCKER_REPOSITORY=lehighlts
-FROM islandora/imagemagick:alpine-3.20.2-imagemagick-7.1.1.36-r0 AS imagemagick
+FROM islandora/imagemagick:alpine-3.20.2-imagemagick-7.1.1.36-r0@sha256:a1fa03a18e7e232e380d070d196dc2c0e0a8762dd385640b932e28fcacfd9b05 AS imagemagick
 FROM ${DOCKER_REPOSITORY}/scyllaridae:${TAG}
 
 SHELL ["/bin/ash", "-o", "pipefail", "-c"]
diff --git a/examples/pandoc/Dockerfile b/examples/pandoc/Dockerfile
index 8b1ce67..9f8ed16 100644
--- a/examples/pandoc/Dockerfile
+++ b/examples/pandoc/Dockerfile
@@ -1,7 +1,7 @@
 ARG TAG=main
 ARG DOCKER_REPOSITORY=lehighlts
 FROM ${DOCKER_REPOSITORY}/scyllaridae:${TAG} AS scyllaridae
-FROM pandoc/latex:3.6-ubuntu AS pandoc
+FROM pandoc/latex:3.6-ubuntu@sha256:c0d1892fa43a11ca9b60b5d020cbf2cee33e94f8eca737eca00ed2a3910f7c8b AS pandoc
 
 # hadolint ignore=DL3008
 RUN apt-get update \
diff --git a/examples/tesseract/Dockerfile b/examples/tesseract/Dockerfile
index ce9a1cc..af493a4 100644
--- a/examples/tesseract/Dockerfile
+++ b/examples/tesseract/Dockerfile
@@ -1,6 +1,6 @@
 ARG TAG=main
 ARG DOCKER_REPOSITORY=lehighlts
-FROM islandora/leptonica:alpine-3.20.2-leptonica-1.84.1-r0 AS leptonica
+FROM islandora/leptonica:alpine-3.20.2-leptonica-1.84.1-r0@sha256:9e9e46a328d8b55a61a352a6b06ff175f98e40cd5773c9bf93aac58fb56b65f7 AS leptonica
 FROM ${DOCKER_REPOSITORY}/scyllaridae:${TAG}
 
 RUN --mount=type=bind,from=leptonica,source=/packages,target=/packages \
diff --git a/examples/whisper/Dockerfile b/examples/whisper/Dockerfile
index 3c25c38..224320a 100644
--- a/examples/whisper/Dockerfile
+++ b/examples/whisper/Dockerfile
@@ -1,7 +1,7 @@
 ARG TAG=main
 ARG DOCKER_REPOSITORY=lehighlts
 FROM ${DOCKER_REPOSITORY}/scyllaridae:${TAG} AS scyllaridae
-FROM ghcr.io/ggerganov/whisper.cpp:main-cuda
+FROM ghcr.io/ggerganov/whisper.cpp:main-cuda@sha256:2eb507108c363c29399f564929e293509c01c98ba516173ab5b769ce6aafdabb
 
 COPY --from=scyllaridae /app /app
 COPY scyllaridae.yml /app