diff --git a/dbaas-operator/Dockerfile b/dbaas-operator/Dockerfile
index 8c9c70e78..c76b04b90 100644
--- a/dbaas-operator/Dockerfile
+++ b/dbaas-operator/Dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM golang:1.26 AS builder
+FROM --platform=$BUILDPLATFORM golang:1.26@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a AS builder
 ARG TARGETOS
 ARG TARGETARCH
 # Allow Go toolchain auto-download when the image patch (e.g. 1.26.1) is
@@ -21,7 +21,7 @@ RUN --mount=type=cache,target=/go/pkg/mod \
     CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} \
     go build -a -o dbaas-operator ./cmd/
 
-FROM ghcr.io/netcracker/qubership-core-base:2.2.13
+FROM ghcr.io/netcracker/qubership-core-base:2.2.13@sha256:39304438e598101578f91d84bc58699fd1a3f717a46b786cb43523735826e7b4
 WORKDIR /app
 COPY --chown=10001:0 --chmod=555 --from=builder /app/dbaas-operator /app/dbaas-operator
 USER 10001:10001
diff --git a/dbaas-operator/dev/aggregator-mock/Dockerfile b/dbaas-operator/dev/aggregator-mock/Dockerfile
index 663d33871..2c93011f5 100644
--- a/dbaas-operator/dev/aggregator-mock/Dockerfile
+++ b/dbaas-operator/dev/aggregator-mock/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.26 AS builder
+FROM golang:1.26@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a AS builder
 ARG TARGETOS
 ARG TARGETARCH
 
@@ -10,7 +10,7 @@ COPY . .
 RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} \
     go build -a -o dbaas-aggregator ./dev/aggregator-mock/main.go
 
-FROM ghcr.io/netcracker/qubership-core-base:latest
+FROM ghcr.io/netcracker/qubership-core-base:latest@sha256:39304438e598101578f91d84bc58699fd1a3f717a46b786cb43523735826e7b4
 WORKDIR /app
 COPY --chown=10001:0 --chmod=555 --from=builder /app/dbaas-aggregator /app/dbaas-aggregator
 USER 10001:10001
diff --git a/dbaas/Dockerfile b/dbaas/Dockerfile
index 70c825356..5fe18a54b 100644
--- a/dbaas/Dockerfile
+++ b/dbaas/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/netcracker/qubership-java-base-prof:25-alpine-2.2.13
+FROM ghcr.io/netcracker/qubership-java-base-prof:25-alpine-2.2.13@sha256:3d7fe1f0fc54679eba5b7097b421c538c395b261d9305be38fd5f159d16eef8b
 LABEL maintainer="qubership"
 
 ARG BASE_PATH=.
diff --git a/validation-image/Dockerfile b/validation-image/Dockerfile
index 4186d5750..3c1a5164c 100644
--- a/validation-image/Dockerfile
+++ b/validation-image/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/netcracker/qubership-core-base:2.2.13
+FROM ghcr.io/netcracker/qubership-core-base:2.2.13@sha256:39304438e598101578f91d84bc58699fd1a3f717a46b786cb43523735826e7b4
 LABEL maintainer="qubership"
 
 USER root