diff --git a/.github/workflows/deploy_nextjs.yaml b/.github/workflows/deploy_nextjs.yaml
index b9d4a6811..e06f5df11 100644
--- a/.github/workflows/deploy_nextjs.yaml
+++ b/.github/workflows/deploy_nextjs.yaml
@@ -86,7 +86,7 @@ jobs:
        
       - name: Update Image in task definition
         id: task-def
-        uses: aws-actions/amazon-ecs-render-task-definition@v1
+        uses: aws-actions/amazon-ecs-render-task-definition@5f07eab76e1851cbd4e07dea0f3ed53b304475bd # v1
         with:
            task-definition: apps/nextjs-website/task-definition.json
            container-name: nextjs-docker
diff --git a/apps/nextjs-website/Dockerfile b/apps/nextjs-website/Dockerfile
index 14f2073ab..e570607de 100644
--- a/apps/nextjs-website/Dockerfile
+++ b/apps/nextjs-website/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:18-alpine
+FROM node:18-alpine@sha256:1edb14175eeb14a14a3abe059339cbd97a0bbb76b6a210d2bb395d63fa4bc4ef
 RUN apk add --no-cache g++ make py3-pip libc6-compat
 ARG ENVIRONMENT
 ENV ENVIRONMENT=${ENVIRONMENT}