diff --git a/.github/workflows/deploy_nextjs.yaml b/.github/workflows/deploy_nextjs.yaml
index 327648cac..ac5e08328 100644
--- a/.github/workflows/deploy_nextjs.yaml
+++ b/.github/workflows/deploy_nextjs.yaml
@@ -90,7 +90,7 @@ jobs:
        
       - name: Update Image in task definition
         id: task-def
-        uses: aws-actions/amazon-ecs-render-task-definition@v1
+        uses: aws-actions/amazon-ecs-render-task-definition@0ae3bf578ea7b3c073260b3c4096016813d401ab # v1
         with:
            task-definition: apps/nextjs-website/task-definition.json
            container-name: nextjs-docker
diff --git a/apps/nextjs-website/Dockerfile b/apps/nextjs-website/Dockerfile
index de55a2245..a6be06eb8 100644
--- a/apps/nextjs-website/Dockerfile
+++ b/apps/nextjs-website/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:18-alpine
+FROM node:18-alpine@sha256:9d5546caeb6a1756d959a01186a5848d3c41eff8eacb4b2203c2efef4fa4022b
 RUN apk add --no-cache g++ make py3-pip libc6-compat
 ARG ENVIRONMENT
 ENV ENVIRONMENT=${ENVIRONMENT}