diff --git a/Dockerfile b/Dockerfile
index 8f201bb..591b8f3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.18 as builder
+FROM golang:1.18@sha256:50c889275d26f816b5314fc99f55425fa76b18fcaf16af255f5d57f09e1f48da as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
@@ -23,7 +23,7 @@ RUN go install github.com/rjeczalik/cmd/notify@1.0.3 && \
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM registry.access.redhat.com/ubi8/ubi
+FROM registry.access.redhat.com/ubi8/ubi@sha256:1fdb97f2d2a44fdef3feaa69100f154631bae65130105ac685d0e34eb1d8c3d0
 WORKDIR /
 COPY --from=builder /workspace/manager .
 COPY --from=builder /workspace/notify /usr/local/bin
diff --git a/ci.Dockerfile b/ci.Dockerfile
index 891f5d7..cfb43c1 100644
--- a/ci.Dockerfile
+++ b/ci.Dockerfile
@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.18 as builder
+FROM golang:1.18@sha256:50c889275d26f816b5314fc99f55425fa76b18fcaf16af255f5d57f09e1f48da as builder
 
 WORKDIR /workspace
 
@@ -8,7 +8,7 @@ RUN go install github.com/gen2brain/keepalived_exporter@0.5.0 && \
 RUN go install github.com/rjeczalik/cmd/notify@1.0.3 && \
     cp ${GOPATH}/bin/notify ./
 
-FROM registry.access.redhat.com/ubi8/ubi
+FROM registry.access.redhat.com/ubi8/ubi@sha256:1fdb97f2d2a44fdef3feaa69100f154631bae65130105ac685d0e34eb1d8c3d0
 WORKDIR /
 COPY --from=builder /workspace/notify /usr/local/bin
 COPY --from=builder /workspace/keepalived_exporter /usr/local/bin
diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
index 6c48c07..e8f257d 100644
--- a/config/manager/kustomization.yaml
+++ b/config/manager/kustomization.yaml
@@ -13,4 +13,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: quay.io/raffaelespazzoli/keepalived-operator
-  newTag: latest
+  newTag: latest@sha256:111529f93552866682ddb4c8ee43ad0f6371d220c8537a4b5e9e8a764aaf37fc