diff --git a/docker-compose.yml b/docker-compose.yml
index 44932b1..d83f290 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -162,7 +162,7 @@ services:
       interval: 5s
       timeout: 3s
       retries: 15
-    image: ghcr.io/scanopy/scanopy/daemon:latest
+    image: ghcr.io/scanopy/scanopy/daemon:latest@sha256:7a8d06ff4576a66e4414eb91dc08931012e870dd7c79d7877e3f251e1a3bc997
     network_mode: host
     privileged: true
     restart: unless-stopped
@@ -182,13 +182,13 @@ services:
       interval: 10s
       timeout: 5s
       retries: 5
-    image: postgres:17-alpine
+    image: postgres:17-alpine@sha256:6f30057d31f5861b66f3545d4821f987aacf1dd920765f0acadea0c58ff975b1
     restart: unless-stopped
     volumes:
       - scanopy-pg-data:/var/lib/postgresql/data
   scanopy-server:
     container_name: scanopy-server
-    image: ghcr.io/scanopy/scanopy/server:latest
+    image: ghcr.io/scanopy/scanopy/server:latest@sha256:24324e2dd3179479f7facb0f13bb5ffc771b016bede261c5ce2245bea65946e8
     depends_on:
       scanopy-pg:
         condition: service_healthy