diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index de06615e..2fa945a5 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/vscode/devcontainers/universal:latest
+FROM mcr.microsoft.com/vscode/devcontainers/universal:latest@sha256:a17850cb3c212f4ce09b895051bd219dd291cbee492e80b2f7915d2562c5c2f8
 
 # Suppress an apt-key warning about standard out not being a terminal. Use in this script is safe.
 ENV APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE=DontWarn