diff --git a/Dockerfile b/Dockerfile
index 608a3d4a8..06e57b766 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 ### Default image is base. You can add other support by modifying BASE_IMAGE_TAG. The following parameters are supported: base (default), aria2, ffmpeg, aio
-ARG BASE_IMAGE_TAG=base
+ARG BASE_IMAGE_TAG=base@sha256:d209f51c1664d22879e5285b55b5e663e9126baaa7153bc4741fb1bf5884ee53
 
 FROM alpine:edge AS builder
 LABEL stage=go-builder
diff --git a/docker-compose.yml b/docker-compose.yml
index 7065fff4f..d350209d5 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -11,4 +11,4 @@ services:
       - UMASK=022
       - TZ=Asia/Shanghai
     container_name: openlist
-    image: 'openlistteam/openlist:latest'
+    image: 'openlistteam/openlist:latest@sha256:c555c6e1c8af2aead38ed12ec761ac077fdf046d19cf033414be8e056aec6b64'