diff --git a/class/defaults.yml b/class/defaults.yml
index 80ff4b63c..34934ce45 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -146,4 +146,4 @@ parameters:
       oc:
         registry: quay.io
         repository: appuio/oc
-        tag: v4.18
+        tag: v4.18@sha256:eecca36e70f86293c477b046890a00f77047e8d01726fbca8ab566902c9b2f44
diff --git a/tests/golden/clustermesh/cilium/cilium/olm/99_cleanup.yaml b/tests/golden/clustermesh/cilium/cilium/olm/99_cleanup.yaml
index bc150fdcd..2eef44999 100644
--- a/tests/golden/clustermesh/cilium/cilium/olm/99_cleanup.yaml
+++ b/tests/golden/clustermesh/cilium/cilium/olm/99_cleanup.yaml
@@ -75,7 +75,7 @@ spec:
           env:
             - name: HOME
               value: /home
-          image: quay.io/appuio/oc:v4.18
+          image: quay.io/appuio/oc:v4.18@sha256:eecca36e70f86293c477b046890a00f77047e8d01726fbca8ab566902c9b2f44
           imagePullPolicy: IfNotPresent
           name: cleanup-old-clusterserviceversions
           ports: []
diff --git a/tests/golden/egress-gateway/cilium/cilium/30_egress_ip_shadow_ranges.yaml b/tests/golden/egress-gateway/cilium/cilium/30_egress_ip_shadow_ranges.yaml
index e663709e4..875af4a45 100644
--- a/tests/golden/egress-gateway/cilium/cilium/30_egress_ip_shadow_ranges.yaml
+++ b/tests/golden/egress-gateway/cilium/cilium/30_egress_ip_shadow_ranges.yaml
@@ -37,7 +37,7 @@ spec:
             - -c
             - 'trap : TERM INT; sleep infinity & wait'
           env: []
-          image: quay.io/appuio/oc:v4.18
+          image: quay.io/appuio/oc:v4.18@sha256:eecca36e70f86293c477b046890a00f77047e8d01726fbca8ab566902c9b2f44
           imagePullPolicy: IfNotPresent
           name: sleep
           ports: []
diff --git a/tests/golden/enterprise-bgp/cilium/cilium/olm/99_cleanup.yaml b/tests/golden/enterprise-bgp/cilium/cilium/olm/99_cleanup.yaml
index bc150fdcd..2eef44999 100644
--- a/tests/golden/enterprise-bgp/cilium/cilium/olm/99_cleanup.yaml
+++ b/tests/golden/enterprise-bgp/cilium/cilium/olm/99_cleanup.yaml
@@ -75,7 +75,7 @@ spec:
           env:
             - name: HOME
               value: /home
-          image: quay.io/appuio/oc:v4.18
+          image: quay.io/appuio/oc:v4.18@sha256:eecca36e70f86293c477b046890a00f77047e8d01726fbca8ab566902c9b2f44
           imagePullPolicy: IfNotPresent
           name: cleanup-old-clusterserviceversions
           ports: []
diff --git a/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml b/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml
index bc150fdcd..2eef44999 100644
--- a/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml
+++ b/tests/golden/olm-opensource/cilium/cilium/olm/99_cleanup.yaml
@@ -75,7 +75,7 @@ spec:
           env:
             - name: HOME
               value: /home
-          image: quay.io/appuio/oc:v4.18
+          image: quay.io/appuio/oc:v4.18@sha256:eecca36e70f86293c477b046890a00f77047e8d01726fbca8ab566902c9b2f44
           imagePullPolicy: IfNotPresent
           name: cleanup-old-clusterserviceversions
           ports: []