diff --git a/Dockerfile b/Dockerfile
index 608a3d4a8f..8c945ef6f9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 ### Default image is base. You can add other support by modifying BASE_IMAGE_TAG. The following parameters are supported: base (default), aria2, ffmpeg, aio
-ARG BASE_IMAGE_TAG=base
+ARG BASE_IMAGE_TAG=base@sha256:c2f0ebf886f5028daf81e2bc09cb7db80ccf3bafc42e2708019628b0c95b28be
 
 FROM alpine:edge AS builder
 LABEL stage=go-builder
diff --git a/docker-compose.yml b/docker-compose.yml
index 7065fff4fb..8715c212de 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -11,4 +11,4 @@ services:
       - UMASK=022
       - TZ=Asia/Shanghai
     container_name: openlist
-    image: 'openlistteam/openlist:latest'
+    image: 'openlistteam/openlist:latest@sha256:897563beb674e7ad04edff14b0037dc8443ca3978570614005519df7eae06434'