diff --git a/docker-compose.yml b/docker-compose.yml
index 50b644d..96823c5 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -23,7 +23,7 @@ services:
     container_name: context7-mcp
     expose:
       - 8080
-    image: mcp/context7:latest
+    image: mcp/context7:latest@sha256:1174e6a29634a83b2be93ac1fefabf63265f498c02c72201fe3464e687dd8836
     restart: unless-stopped
   docker-socket-proxy:
     container_name: dockerproxy
@@ -66,7 +66,7 @@ services:
       LOCAL_ONLY: #optional
       WHISPER_BEAM: 1 #optional
       WHISPER_LANG: en #optional
-    image: lscr.io/linuxserver/faster-whisper:latest
+    image: lscr.io/linuxserver/faster-whisper:latest@sha256:3d0ff4f43e6325cf78491da79669a607f9a961eae5325886acc263ea28a074e2
     ports:
       - "10300:10300"
     restart: unless-stopped
@@ -80,7 +80,7 @@ services:
       GITEA_ACCESS_TOKEN: ${GITEA_ROOT_TOKEN}
     expose:
       - 8080
-    image: gitea/gitea-mcp-server:0.6.0
+    image: gitea/gitea-mcp-server:0.6.0@sha256:fe9bb39bf37b41528ffb8404bb6ae203e8260400eb1b23cfb981fb73677eb95f
     restart: unless-stopped
   meilisearch:
     container_name: meilisearch
@@ -97,7 +97,7 @@ services:
       - ${ULTIMA_DOCKER_DIR}/meilisearch:/meili_data
   ollama:
     container_name: ollama
-    image: ollama/ollama
+    image: ollama/ollama@sha256:78b19735971f9a2855c98ca39a775a43fd3ebe104af0fe2155b5261c34deef31
     ports:
       - 11434:11434
     restart: unless-stopped
@@ -116,7 +116,7 @@ services:
       PIPER_NOISEW: 0.333 #optional
       PIPER_SPEAKER: 0 #optional
       NO_STREAMING: #optional
-    image: lscr.io/linuxserver/piper:latest
+    image: lscr.io/linuxserver/piper:latest@sha256:fddc63c2de74931d1234ae8bc7a9b0601f55aed7c8521562240566ee1af3ef67
     ports:
       - 10200:10200
     restart: unless-stopped
@@ -144,7 +144,7 @@ services:
     stdin_open: true
   signoz-mcp:
     container_name: signoz-mcp-server
-    image: signoz/signoz-mcp-server:v0.0.4
+    image: signoz/signoz-mcp-server:v0.0.4@sha256:b12723ae87b02b0efbba4b4c8a60058ebf10e3162385c692248d512121a1efa6
     environment:
       SIGNOZ_URL: http://192.168.1.254:36113
       SIGNOZ_API_KEY: ${SIGNOZ_API_KEY}
@@ -170,7 +170,7 @@ services:
       - ${ULTIMA_DOCKER_DIR}/stable-diffusion-webui/output:/output
   webui-mcpo:
     container_name: webui-mcpo
-    image: masterno12/webui-mcpo:latest
+    image: masterno12/webui-mcpo:latest@sha256:018df5374c627ebeb82ea395a9c26f7439cf8a66c003608f390d09eecfc8db7d
     ports:
       - 18003:8000
     restart: unless-stopped
@@ -179,7 +179,7 @@ services:
   wyoming-openwakeword:
     command: "--preload-model ok_nabu"
     container_name: wyoming-openwakeword
-    image: rhasspy/wyoming-openwakeword
+    image: rhasspy/wyoming-openwakeword@sha256:52cb1168731a1849fc28cf339c935fde58746bbabc94226668a40ef6ddf5d42b
     ports:
       - 10400:10400
     restart: unless-stopped