diff --git a/apps/gitea/restic/cronjob.yaml b/apps/gitea/restic/cronjob.yaml
index 7ab102c..7a688ee 100644
--- a/apps/gitea/restic/cronjob.yaml
+++ b/apps/gitea/restic/cronjob.yaml
@@ -26,7 +26,7 @@ spec:
 
           initContainers:
           - name: postgres-dump-init
-            image: bitnami/postgresql:15.3.0-debian-11-r24
+            image: bitnami/postgresql:15.3.0-debian-11-r24@sha256:fff6086d557d962422c6d751b6723877642170bbcc25d6f23e5c2c2f079987d5
             command: ["/bin/sh", "-c"]
             args: ["pg_dump -h gitea-postgresql -p 5432 -U gitea gitea -Fc > /backup/postgres_backup.dump"]
             env:
@@ -41,7 +41,7 @@ spec:
 
           containers:
           - name: restic-container
-            image: git.namesny.com/cluster/restic:latest
+            image: git.namesny.com/cluster/restic:latest@sha256:8efb9776d9b3250012d17bbfff865420e5ffa0688010d006448c4ff358b0ee32
             imagePullPolicy: Always
             command: ["/bin/sh", "/app/backup.sh"]
             envFrom: