diff --git a/.github/workflows/app_service_deploy.yaml b/.github/workflows/app_service_deploy.yaml
index a4b53ca..f832db5 100644
--- a/.github/workflows/app_service_deploy.yaml
+++ b/.github/workflows/app_service_deploy.yaml
@@ -37,7 +37,7 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
 
       - name: Log in to the Container Registry
         uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1 # v3.3.0
diff --git a/src/Presentation/PortaleFatture.BE.Api/Dockerfile b/src/Presentation/PortaleFatture.BE.Api/Dockerfile
index 42dcef3..c95e320 100644
--- a/src/Presentation/PortaleFatture.BE.Api/Dockerfile
+++ b/src/Presentation/PortaleFatture.BE.Api/Dockerfile
@@ -1,12 +1,12 @@
 #See https://aka.ms/customizecontainer to learn how to customize your debug container and how Visual Studio uses this Dockerfile to build your images for faster debugging.
 
-FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS base
+FROM mcr.microsoft.com/dotnet/aspnet:8.0@sha256:84a93198d134a82a8f41c88b96adc6bfc2caf1d91ad25d5f25d90279938e1c4d AS base
 USER app
 WORKDIR /app
 EXPOSE 80
 EXPOSE 443
 
-FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
+FROM mcr.microsoft.com/dotnet/sdk:8.0@sha256:a364676fedc145cf88caad4bfb3cc372aae41e596c54e8a63900a2a1c8e364c6 AS build
 
 ARG BUILD_CONFIGURATION=Release
 WORKDIR /src