diff --git a/.gitea/workflows/pr-docker-deploy.yml b/.gitea/workflows/pr-docker-deploy.yml
index 5816c49..39043b0 100644
--- a/.gitea/workflows/pr-docker-deploy.yml
+++ b/.gitea/workflows/pr-docker-deploy.yml
@@ -24,7 +24,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Node.js Environment
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2
         with:
           node-version: '20'
 
diff --git a/docker-compose.yml b/docker-compose.yml
index 29a3162..40b486a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -196,7 +196,7 @@ services:
     container_name: wikipedia-mcp
     expose:
       - 8000
-    image: mcp/wikipedia-mcp:latest
+    image: mcp/wikipedia-mcp:latest@sha256:047f17273bae96828903cfd12f13c7a64951b54e537530ecb6678fff5204a584
     restart: unless-stopped
 volumes:
   ollama: