diff --git a/.forgejo/workflows/actions.yml b/.forgejo/workflows/actions.yml
index cdb4f36..1fe66e8 100644
--- a/.forgejo/workflows/actions.yml
+++ b/.forgejo/workflows/actions.yml
@@ -14,7 +14,7 @@ jobs:
     container: catthehacker/ubuntu:act-latest@sha256:89367f3c5437699c6b43fa941041725bcc77682a46f2bbe6557541e384d9cedb
     steps:
       - name: Checkout code
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           token: ${{ secrets.COASTALCOMMITSTOKEN }}
       - name: Login to CoastalCommits
@@ -38,10 +38,10 @@ jobs:
   lint:
     name: Lint
     runs-on: docker
-    container: www.coastalcommits.com/cswimr/actions:uv
+    container: www.coastalcommits.com/cswimr/actions:uv@sha256:513950ba040ce410cbbdbafd5e21923102c3e138474df078d6948a9d8a28e3c7
     steps:
       - name: Checkout code
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           token: ${{ secrets.COASTALCOMMITSTOKEN }}
       - name: Install dependencies
diff --git a/Dockerfile b/Dockerfile
index 815662d..5359d02 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/astral-sh/uv:debian-slim
+FROM ghcr.io/astral-sh/uv:debian-slim@sha256:7209e1b02f3e2429ae87ef7d7c77f9e9e3a218d36e1c30bfd788c0f6c71ec6dc
 
 WORKDIR /app
 
diff --git a/docker-compose.yml b/docker-compose.yml
index bdb68e0..68c58d4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   web:
-    image: www.coastalcommits.com/galacticfactory/downloader:latest@sha256:0cfddaa860aa812ced9bcbbc7a83d3771c8573ab13861381f856e6f0cdf8ebb0
+    image: www.coastalcommits.com/galacticfactory/downloader:latest@sha256:3f840978d501006f33992562cbe625de5aba39304b5c0edd0bccffc4db176a6d
     restart: always
     environment:
       - FORGEJO_BASE_URL=https://www.coastalcommits.com