diff --git a/.github/workflows/validate_pr.yml b/.github/workflows/validate_pr.yml
index 980218c0..fcbb2376 100644
--- a/.github/workflows/validate_pr.yml
+++ b/.github/workflows/validate_pr.yml
@@ -14,10 +14,10 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           persist-credentials: false
-      - uses: actions/setup-go@v4
+      - uses: actions/setup-go@19bb51245e9c80abacb2e91cc42b33fa478b8639 # v4
         with:
           go-version: '1.21'
           cache: false
@@ -29,11 +29,11 @@ jobs:
     name: Unit-Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           persist-credentials: false
       - name: Set up Go 1.21
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@19bb51245e9c80abacb2e91cc42b33fa478b8639 # v4
         with:
           go-version: 1.21
       - name: Unit Tests
@@ -42,11 +42,11 @@ jobs:
     name: Build Binaries
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           persist-credentials: false
       - name: Set up Go 1.21
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@19bb51245e9c80abacb2e91cc42b33fa478b8639 # v4
         with:
           go-version: 1.21
       - name: Build All
diff --git a/cmd/benchtool/Dockerfile b/cmd/benchtool/Dockerfile
index 777d458c..f9f19d4b 100644
--- a/cmd/benchtool/Dockerfile
+++ b/cmd/benchtool/Dockerfile
@@ -1,11 +1,11 @@
-FROM golang:1.22 as build
+FROM golang:1.22@sha256:1cf6c45ba39db9fd6db16922041d074a63c935556a05c5ccb62d181034df7f02 as build
 ARG GOARCH="amd64"
 COPY . /build_dir
 WORKDIR /build_dir
 ENV GOPROXY=https://proxy.golang.org
 RUN make clean && make benchtool
 
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates
 COPY       --from=build /build_dir/cmd/benchtool/benchtool /usr/bin/benchtool
 EXPOSE     80
diff --git a/cmd/benchtool/GR.Dockerfile b/cmd/benchtool/GR.Dockerfile
index 6c0a7714..4a6b9619 100644
--- a/cmd/benchtool/GR.Dockerfile
+++ b/cmd/benchtool/GR.Dockerfile
@@ -1,4 +1,4 @@
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates
 COPY       benchtool /usr/bin/benchtool
 EXPOSE     80
diff --git a/cmd/cortextool/Dockerfile b/cmd/cortextool/Dockerfile
index 6226915d..d25822c4 100644
--- a/cmd/cortextool/Dockerfile
+++ b/cmd/cortextool/Dockerfile
@@ -1,11 +1,11 @@
-FROM golang:1.22 as build
+FROM golang:1.22@sha256:1cf6c45ba39db9fd6db16922041d074a63c935556a05c5ccb62d181034df7f02 as build
 ARG GOARCH="amd64"
 COPY . /build_dir
 WORKDIR /build_dir
 ENV GOPROXY=https://proxy.golang.org
 RUN make clean && make cortextool
 
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates tzdata
 COPY       --from=build /build_dir/cmd/cortextool/cortextool /usr/bin/cortextool
 EXPOSE     80
diff --git a/cmd/cortextool/GR.Dockerfile b/cmd/cortextool/GR.Dockerfile
index 78368dea..69e8924a 100644
--- a/cmd/cortextool/GR.Dockerfile
+++ b/cmd/cortextool/GR.Dockerfile
@@ -1,4 +1,4 @@
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates
 COPY       cortextool /usr/bin/cortextool
 EXPOSE     80
diff --git a/cmd/e2ealerting/Dockerfile b/cmd/e2ealerting/Dockerfile
index 47ed4cf5..3effd674 100644
--- a/cmd/e2ealerting/Dockerfile
+++ b/cmd/e2ealerting/Dockerfile
@@ -1,10 +1,10 @@
-FROM golang:1.22 as build
+FROM golang:1.22@sha256:1cf6c45ba39db9fd6db16922041d074a63c935556a05c5ccb62d181034df7f02 as build
 ARG GOARCH="amd64"
 COPY . /build_dir
 WORKDIR /build_dir
 RUN make clean && make e2ealerting
 
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates
 COPY       --from=build /build_dir/cmd/e2ealerting/e2ealerting /usr/bin/e2ealerting
 EXPOSE     80
diff --git a/cmd/logtool/Dockerfile b/cmd/logtool/Dockerfile
index 13192acb..71c61f43 100644
--- a/cmd/logtool/Dockerfile
+++ b/cmd/logtool/Dockerfile
@@ -1,11 +1,11 @@
-FROM golang:1.22 as build
+FROM golang:1.22@sha256:1cf6c45ba39db9fd6db16922041d074a63c935556a05c5ccb62d181034df7f02 as build
 ARG GOARCH="amd64"
 COPY . /build_dir
 WORKDIR /build_dir
 ENV GOPROXY=https://proxy.golang.org
 RUN make clean && make logtool
 
-FROM       alpine:3.14
+FROM       alpine:3.14@sha256:0f2d5c38dd7a4f4f733e688e3a6733cb5ab1ac6e3cb4603a5dd564e5bfb80eed
 RUN        apk add --update --no-cache ca-certificates
 COPY       --from=build /build_dir/cmd/logtool/logtool /usr/bin/logtool
 EXPOSE     80