diff --git a/Dockerfile b/Dockerfile
index 47472898a..20ed81da7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-ARG GO_VERSION=1.25.7
+ARG GO_VERSION=1.25.7@sha256:5a79b94c34c299ac0361fbb7c7fca6dc552e166b42341050323fa3ab137d7be9
 FROM golang:${GO_VERSION} AS build
 WORKDIR /deck
 COPY go.mod ./