diff --git a/.circleci/config.yml b/.circleci/config.yml
index f8cbfbc2c..55829e04c 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -65,10 +65,10 @@ common:
 executors:
   cif_executor:
     docker:
-      - image: cimg/openjdk:11.0.16-browsers
+      - image: cimg/openjdk:11.0.16-browsers@sha256:d41abcf26cb4714c8c451f87560ae3dc88767c84e0c03754286df1f301c00a51
   cif_executor_java8:
     docker:
-      - image: cimg/openjdk:8.0-browsers
+      - image: cimg/openjdk:8.0-browsers@sha256:643804ed7ffa29e0d112ae3f22dbc297acf41ec8a962dddda64eeea69ce58f5a
   test_executor_cloudready:
     docker:
       - image: docker-adobe-cif-release.dr-uw2.adobeitc.com/circleci-qp:6.4.6-openjdk11
@@ -137,7 +137,7 @@ jobs:
 
   karma:
     docker:
-      - image: cimg/node:16.17.1-browsers
+      - image: cimg/node:16.17.1-browsers@sha256:0c64656d30e674482e117c80439e49a86e7cf517c8a20377f490488ba0e74d58
     steps:
       - checkout
       - browser-tools/install-browser-tools:
@@ -163,7 +163,7 @@ jobs:
 
   jest:
     docker:
-      - image: cimg/node:16.20.0-browsers
+      - image: cimg/node:16.20.0-browsers@sha256:12230011c5d81ca32d79fe92bc5212c4f05c10eb5ac3a15c467e6a40750d9889
     steps:
       - checkout
       - run:
@@ -186,7 +186,7 @@ jobs:
 
   jest-extension-product-recs:
     docker:
-      - image: cimg/node:16.17.1-browsers
+      - image: cimg/node:16.17.1-browsers@sha256:0c64656d30e674482e117c80439e49a86e7cf517c8a20377f490488ba0e74d58
     steps:
       - checkout
       - run:
@@ -220,7 +220,7 @@ jobs:
 
   jest-extension-experience-platform-connector:
     docker:
-      - image: cimg/node:16.17.1-browsers
+      - image: cimg/node:16.17.1-browsers@sha256:0c64656d30e674482e117c80439e49a86e7cf517c8a20377f490488ba0e74d58
     steps:
       - checkout
       - run:
diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index c571299f5..96ac1076a 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -1,6 +1,6 @@
 {
 	"name": "Java",
-	"image": "mcr.microsoft.com/devcontainers/java:11",
+	"image": "mcr.microsoft.com/devcontainers/java:11@sha256:03d3077af7501cf193f5b4ed5ca61adc9181528c976ee94b9290ac35b6454080",
 	"features": {
 		"ghcr.io/devcontainers/features/java:1": {
 			"version": "none",