diff --git a/compose.prod.yaml b/compose.prod.yaml
index 2d9fdd95f..c9d1c5ac1 100644
--- a/compose.prod.yaml
+++ b/compose.prod.yaml
@@ -56,7 +56,7 @@ services:
 
 
   postgres:
-    image: "postgres:17.4"
+    image: "postgres:17.9@sha256:7ad98329d513dd497293b951c195ca354274a77f12ddbbbbf85e68a811823d72"
     shm_size: "1g"
     command: >
       postgres -c "shared_buffers=4GB"
@@ -77,7 +77,7 @@ services:
       retries: 5
 
   seaweedfs:
-    image: "chrislusf/seaweedfs:4.13"
+    image: "chrislusf/seaweedfs:4.20@sha256:cea8339d21dad1b200adce581dd7434d254b8f5975f142c3b4c930ba78647eef"
     command: >
       server
       -s3
@@ -95,7 +95,7 @@ services:
       - "seaweedfs-data:/data:rw"
 
   chrome:
-    image: "chromedp/headless-shell:140.0.7259.2"
+    image: "chromedp/headless-shell:149.0.7779.3@sha256:b24482ae166e2c67135f5a8ba9575c257efdd8e2fd6b2e931f9d88ede3d72f3b"
     ports:
       - "9222:9222"
     command:
diff --git a/compose.yaml b/compose.yaml
index 8c1f09f1f..03e48668c 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -1,6 +1,6 @@
 services:
   postgres:
-    image: "postgres:18.1"
+    image: "postgres:18.3@sha256:52e6ffd11fddd081ae63880b635b2a61c14008c17fc98cdc7ce5472265516dd0"
     shm_size: "1g"
     command: >
       postgres -c "shared_buffers=1GB"
@@ -21,7 +21,7 @@ services:
       retries: 5
 
   seaweedfs:
-    image: "chrislusf/seaweedfs:latest"
+    image: "chrislusf/seaweedfs:4.20@sha256:cea8339d21dad1b200adce581dd7434d254b8f5975f142c3b4c930ba78647eef"
     command: >
       server
       -s3
@@ -39,7 +39,7 @@ services:
       - "seaweedfs-data:/data:rw"
 
   grafana:
-    image: "grafana/grafana:latest"
+    image: "grafana/grafana:13.0.0@sha256:a03d9e604e4dba58c5e64458a879701f46ef64af1f596058aacfad9aacdcab34"
     ports:
       - "3001:3000"
     volumes:
@@ -52,7 +52,7 @@ services:
       GF_USERS_DEFAULT_THEME: "light"
 
   prometheus:
-    image: "prom/prometheus:latest"
+    image: "prom/prometheus:v3.11.2@sha256:5550dc63da361dc30f6fe02ac0e4dfc736ededfef3c8d12a634db04a67824d78"
     volumes:
       - "./compose/prometheus/prometheus.yaml:/etc/prometheus/prometheus.yml"
       - "prometheus-data:/prometheus"
@@ -68,7 +68,7 @@ services:
       - "9191:9191"
 
   loki:
-    image: "grafana/loki:latest"
+    image: "grafana/loki:3.7.1@sha256:73e905b51a7f917f7a1075e4be68759df30226e03dcb3cd2213b989cc0dc8eb4"
     ports:
       - "3100:3100"
     command:
@@ -87,7 +87,7 @@ services:
       - "tempo-data:/var/tempo:rw"
 
   mailpit:
-    image: "axllent/mailpit:latest"
+    image: "axllent/mailpit:v1.29.6@sha256:0b5c5f7ffd3c93474baa7fd3869c1462e5a3d03256ed0933dfc0e7d81d794036"
     ports:
       - "1025:1025" # SMTP server
       - "8025:8025" # Web UI
@@ -99,7 +99,7 @@ services:
       - "MP_SMTP_AUTH_ALLOW_INSECURE=true"
 
   chrome:
-    image: "chromedp/headless-shell:140.0.7259.2"
+    image: "chromedp/headless-shell:149.0.7779.3@sha256:b24482ae166e2c67135f5a8ba9575c257efdd8e2fd6b2e931f9d88ede3d72f3b"
     ports:
       - "9222:9222"
     command:
@@ -115,7 +115,7 @@ services:
       - "--disable-extensions"
 
   pebble:
-    image: "ghcr.io/letsencrypt/pebble:latest"
+    image: "ghcr.io/letsencrypt/pebble:2.10.0@sha256:68cf1ec8a8db96f64244d5f559c448bc8e54f2934e0dd53a414eabffda7a6f22"
     ports:
       - "14000:14000" # ACME server
       - "15000:15000" # Management interface
@@ -128,15 +128,15 @@ services:
       - "./compose/pebble:/test/config:ro"
 
   pebble-challtestsrv:
-    image: "ghcr.io/letsencrypt/pebble-challtestsrv:latest"
+    image: "ghcr.io/letsencrypt/pebble-challtestsrv:2.10.0@sha256:df85447c39114cd2b3da971e751682ad2db19a996034b47d5392cd4a0f43406a"
     ports:
       - "8055:8055" # HTTP-01 challenge test server
       - "8053:8053" # DNS server
       - "8056:8056" # Management API
-    command: -dns01 ":8053" -http01 ":8055" -management ":8056"
+    command: -dnsserver ":8053" -http01 ":8055" -management ":8056"
 
   keycloak:
-    image: quay.io/keycloak/keycloak:latest
+    image: "quay.io/keycloak/keycloak:26.6.1@sha256:26ae26445475f7fac5f90ee138b1bdb64324f5815fb16133ffdbdb122d97c4d8"
     user: root
     environment:
       KC_HOSTNAME: localhost
diff --git a/contrib/helm/charts/probo/templates/postgresql-demo-app.yml b/contrib/helm/charts/probo/templates/postgresql-demo-app.yml
index 7b723a91f..fa5da0900 100644
--- a/contrib/helm/charts/probo/templates/postgresql-demo-app.yml
+++ b/contrib/helm/charts/probo/templates/postgresql-demo-app.yml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
         - name: postgres
-          image: postgres:18
+          image: "postgres:18.3@sha256:52e6ffd11fddd081ae63880b635b2a61c14008c17fc98cdc7ce5472265516dd0"
           env:
             - name: POSTGRES_USER
               value: {{ .Values.postgresql.auth.postgresUser }}
diff --git a/contrib/helm/charts/probo/values.yaml b/contrib/helm/charts/probo/values.yaml
index 6a28ea618..91b3c366f 100644
--- a/contrib/helm/charts/probo/values.yaml
+++ b/contrib/helm/charts/probo/values.yaml
@@ -331,7 +331,7 @@ seaweedfs:
 
   image:
     repository: chrislusf/seaweedfs
-    tag: "latest"
+    tag: "4.20@sha256:cea8339d21dad1b200adce581dd7434d254b8f5975f142c3b4c930ba78647eef"
     pullPolicy: IfNotPresent
 
   resources:
@@ -360,7 +360,7 @@ chrome:
 
   image:
     repository: chromedp/headless-shell
-    tag: "140.0.7259.2"
+    tag: "149.0.7779.3@sha256:b24482ae166e2c67135f5a8ba9575c257efdd8e2fd6b2e931f9d88ede3d72f3b"
     pullPolicy: IfNotPresent
 
   resources: