diff --git a/Dockerfile b/Dockerfile
index ad97555..ff25bc4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -20,7 +20,7 @@ RUN go build -ldflags="-s -w" -a -o cloud-profile-sync main.go
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM gcr.io/distroless/static:nonroot
+FROM gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3
 WORKDIR /
 LABEL source_repository="https://github.com/cobaltcore-dev/cloud-profile-sync"
 COPY --from=builder /workspace/cloud-profile-sync .