diff --git a/mx1/containers/stalwart/docker-compose.yml b/mx1/containers/stalwart/docker-compose.yml
index 8d88a1e7..31269e2b 100644
--- a/mx1/containers/stalwart/docker-compose.yml
+++ b/mx1/containers/stalwart/docker-compose.yml
@@ -1,7 +1,7 @@
 ---
 services:
   postgres:
-    image: docker.io/library/postgres:16-alpine
+    image: docker.io/library/postgres:16-alpine@sha256:721873c34ceb9f8d8fc265984940dc982404c105f19ad51be9fdc5970a6080ea
     restart: unless-stopped
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
@@ -21,7 +21,7 @@ services:
       - app-infra
 
   keydb:
-    image: docker.io/eqalpha/keydb:x86_64_v0.9.6
+    image: docker.io/eqalpha/keydb:x86_64_v0.9.6@sha256:3ba477d222fa893fc948dc9293f513483ab2d6fa5abb82d8d68485056faf1261
     restart: unless-stopped
     healthcheck:
       test: ["CMD-SHELL", "keydb-cli ping | grep PONG"]
diff --git a/web1/containers/authentik/docker-compose.yml b/web1/containers/authentik/docker-compose.yml
index 894b2d88..8e4f00f7 100644
--- a/web1/containers/authentik/docker-compose.yml
+++ b/web1/containers/authentik/docker-compose.yml
@@ -1,7 +1,7 @@
 ---
 services:
   database:
-    image: docker.io/library/postgres:16-alpine
+    image: docker.io/library/postgres:16-alpine@sha256:721873c34ceb9f8d8fc265984940dc982404c105f19ad51be9fdc5970a6080ea
     restart: unless-stopped
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
diff --git a/web1/containers/calcom/docker-compose.yml b/web1/containers/calcom/docker-compose.yml
index b354a0a9..e4e4e15a 100644
--- a/web1/containers/calcom/docker-compose.yml
+++ b/web1/containers/calcom/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   database:
-    image: postgres:18-alpine
+    image: postgres:18-alpine@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873
     restart: unless-stopped
     volumes:
       - database:/var/lib/postgresql/data
@@ -15,7 +15,7 @@ services:
       - calcom
 
   calcom:
-    image: calcom/cal.com:v6.2.0
+    image: calcom/cal.com:v6.2.0@sha256:ace3bb1219fb7306585ab9f4d94d41af7ee064c343db0498173436bbe857bd49
     restart: unless-stopped
     cap_drop:
       - ALL
diff --git a/web1/containers/webmail/docker-compose.yml b/web1/containers/webmail/docker-compose.yml
index 9b16d84c..529a7764 100644
--- a/web1/containers/webmail/docker-compose.yml
+++ b/web1/containers/webmail/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   webmail:
-    image: ghcr.io/linagora/tmail-web:release
+    image: ghcr.io/linagora/tmail-web:release@sha256:ed59999f87de3f77b19a28c657fa291e0e72ede7108dcc59c0fc770cac50e7a7
     container_name: webmail
     restart: unless-stopped
     cap_drop:
diff --git a/web3/containers/authentik/docker-compose.yml b/web3/containers/authentik/docker-compose.yml
index 9a854ba6..71d43684 100644
--- a/web3/containers/authentik/docker-compose.yml
+++ b/web3/containers/authentik/docker-compose.yml
@@ -1,7 +1,7 @@
 ---
 services:
   database:
-    image: docker.io/library/postgres:16-alpine
+    image: docker.io/library/postgres:16-alpine@sha256:721873c34ceb9f8d8fc265984940dc982404c105f19ad51be9fdc5970a6080ea
     restart: unless-stopped
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
diff --git a/web3/containers/calcom/docker-compose.yml b/web3/containers/calcom/docker-compose.yml
index b354a0a9..e4e4e15a 100644
--- a/web3/containers/calcom/docker-compose.yml
+++ b/web3/containers/calcom/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   database:
-    image: postgres:18-alpine
+    image: postgres:18-alpine@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873
     restart: unless-stopped
     volumes:
       - database:/var/lib/postgresql/data
@@ -15,7 +15,7 @@ services:
       - calcom
 
   calcom:
-    image: calcom/cal.com:v6.2.0
+    image: calcom/cal.com:v6.2.0@sha256:ace3bb1219fb7306585ab9f4d94d41af7ee064c343db0498173436bbe857bd49
     restart: unless-stopped
     cap_drop:
       - ALL
diff --git a/web3/containers/fleet/docker-compose.yml b/web3/containers/fleet/docker-compose.yml
index fd030502..e89e72c2 100644
--- a/web3/containers/fleet/docker-compose.yml
+++ b/web3/containers/fleet/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   database:
-    image: mysql:8.4
+    image: mysql:8.4@sha256:0744ee5ef89ce6ccfa13de3e579fe6b9e27f93dd70da9c06d2c908b1b193fb8d
     env_file: .env
     cap_add:
       - SYS_NICE
@@ -30,7 +30,7 @@ services:
       retries: 12
 
   fleet-init:
-    image: alpine:3.24
+    image: alpine:3.24@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
     volumes:
       - logs:/logs
       - data:/fleet
diff --git a/web3/containers/n8n/docker-compose.yml b/web3/containers/n8n/docker-compose.yml
index 830e9171..5cb0a689 100644
--- a/web3/containers/n8n/docker-compose.yml
+++ b/web3/containers/n8n/docker-compose.yml
@@ -1,7 +1,7 @@
 ---
 services:
   postgres:
-    image: postgres:18-alpine
+    image: postgres:18-alpine@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873
     restart: unless-stopped
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]