diff --git a/directus/docker-compose.yml b/directus/docker-compose.yml
index 125f497..e19e469 100644
--- a/directus/docker-compose.yml
+++ b/directus/docker-compose.yml
@@ -9,7 +9,7 @@ volumes:
 services:
   directus:
     container_name: ${DIRECTUS_CONTAINER_NAME:-directus}
-    image: ${DIRECTUS_IMAGE:-directus/directus:9.5.1}
+    image: ${DIRECTUS_IMAGE:-directus/directus:9.5.1@sha256:c21099315f8720a12c65eea30b7450a96845ba17e9313e95a3fd23867b96c289}
     restart: always
     volumes:
       - directus:/directus/uploads
diff --git a/drone/runner/docker-compose.yml b/drone/runner/docker-compose.yml
index fcfd73b..6cdb98b 100644
--- a/drone/runner/docker-compose.yml
+++ b/drone/runner/docker-compose.yml
@@ -7,7 +7,7 @@ version: "3.8"
 services:
   drone-runner:
     container_name: ${DRONE_RUNNER_CONTAINER_NAME}
-    image: ${DRONE_RUNNER_IMAGE:-drone/drone-runner-docker:1.8.0}
+    image: ${DRONE_RUNNER_IMAGE:-drone/drone-runner-docker:1.8.0@sha256:70da970bb76a62567edbea1ac8002d9484664267f4cbb49fbd7c87a753d02260}
     restart: always
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
diff --git a/drone/server/docker-compose.yml b/drone/server/docker-compose.yml
index 3cae11b..daa903a 100644
--- a/drone/server/docker-compose.yml
+++ b/drone/server/docker-compose.yml
@@ -9,7 +9,7 @@ volumes:
 services:
   drone-server:
     container_name: ${DRONE_SERVER_CONTAINER_NAME:-drone-server}
-    image: ${DRONE_SERVER_IMAGE:-drone/drone:2.9.1}
+    image: ${DRONE_SERVER_IMAGE:-drone/drone:2.9.1@sha256:674e62c62cf41e06773c1b5e89687f1d514d49db6d1bb78678a5ef86927bc479}
     restart: always
     environment:
       # https://docs.drone.io/server/reference/drone-rpc-secret/
diff --git a/hedgedoc/docker-compose.yml b/hedgedoc/docker-compose.yml
index 0928bce..142e092 100644
--- a/hedgedoc/docker-compose.yml
+++ b/hedgedoc/docker-compose.yml
@@ -7,7 +7,7 @@ volumes:
 services:
   hedgedoc:
     container_name: ${HEDGEDOC_CONTAINER_NAME:-hedgedoc}
-    image: ${HEDGEDOC_IMAGE:-linuxserver/hedgedoc:1.9.2-ls39}
+    image: ${HEDGEDOC_IMAGE:-linuxserver/hedgedoc:1.9.2-ls44@sha256:e3e0ec428e043104ec626a4c89e09baf61bc8939f8a28979bdadf3a4fa6f513f}
     restart: always
     depends_on:
       - postgres
diff --git a/mobilizon/docker-compose.yml b/mobilizon/docker-compose.yml
index 7a29ec5..2317e3b 100644
--- a/mobilizon/docker-compose.yml
+++ b/mobilizon/docker-compose.yml
@@ -9,7 +9,7 @@ volumes:
 services:
   mobilizon:
     container_name: ${MOBILIZON_CONTAINER_NAME:-mobilizon}
-    image: ${MOBILIZON_IMAGE:-framasoft/mobilizon:2.0.2}
+    image: ${MOBILIZON_IMAGE:-framasoft/mobilizon:2.0.2@sha256:a703d399c35b3b685be7c154bf2ac74f5acd88d8c28dd42f05f68859d76edfd3}
     restart: always
     depends_on:
       - postgres
diff --git a/nextcloud/docker-compose.yml b/nextcloud/docker-compose.yml
index 6e8f99b..7156317 100644
--- a/nextcloud/docker-compose.yml
+++ b/nextcloud/docker-compose.yml
@@ -7,7 +7,7 @@ volumes:
 services:
   nextcloud-fpm:
     container_name: ${NEXTCLOUD_CONTAINER_NAME:-nextcloud}-fpm
-    image: ${NEXTCLOUD_IMAGE:-nextcloud:22.2.3-fpm-alpine}
+    image: ${NEXTCLOUD_IMAGE:-nextcloud:22.2.3-fpm-alpine@sha256:de87108415631635649ad4b1027b6a6d06b80e28bcab87e38c59c1b943ef36d8}
     restart: always
     depends_on:
       - postgres
diff --git a/redis/docker-compose.yml b/redis/docker-compose.yml
index 35755cd..ed57335 100644
--- a/redis/docker-compose.yml
+++ b/redis/docker-compose.yml
@@ -2,7 +2,7 @@ version: "3.8"
 
 services:
   redis:
-    image: ${REDIS_IMAGE:-redis:6.2.6-alpine}
+    image: ${REDIS_IMAGE:-redis:6.2.6-alpine@sha256:4bed291aa5efb9f0d77b76ff7d4ab71eee410962965d052552db1fb80576431d}
     container_name: ${REDIS_CONTAINER_NAME:-redis}
     restart: always
     environment:
diff --git a/traefik/docker-compose.yml b/traefik/docker-compose.yml
index c07e956..7f80d3d 100644
--- a/traefik/docker-compose.yml
+++ b/traefik/docker-compose.yml
@@ -11,7 +11,7 @@ networks:
 services:
   traefik:
     container_name: ${TRAEFIK_CONTAINER_NAME:-traefik}
-    image: ${TRAEFIK_IMAGE:-traefik:v2.6.0}
+    image: ${TRAEFIK_IMAGE:-traefik:v2.6.0@sha256:b22bd53ef626cf3667390c3e3651936b08f9c0c9107e3a6faf02e6dc06b3e0c0}
     restart: always
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock