diff --git a/cornucopia.owasp.org/Dockerfile b/cornucopia.owasp.org/Dockerfile
index 79f4703f..b9d0a779 100644
--- a/cornucopia.owasp.org/Dockerfile
+++ b/cornucopia.owasp.org/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20-alpine AS builder
+FROM node:iron-alpine3.21@sha256:957dbf2afb4f22d9e2b94b981e242cbb796965cd3d9cc02d436e2a05fa0ec300 AS builder
 
 WORKDIR /app
 
@@ -14,7 +14,7 @@ COPY . .
 RUN pnpm run build
 
 # Production stage
-FROM nginx:alpine
+FROM nginx:alpine3.21@sha256:b471bb609adc83f73c2d95148cf1bd683408739a3c09c0afc666ea2af0037aef
 
 # Copy the built assets from builder stage to nginx
 COPY --from=builder /app/build /usr/share/nginx/html