diff --git a/roles/docker_komodo/tasks/main.yml b/roles/docker_komodo/tasks/main.yml
index 3e7553af..cc2cbc5e 100644
--- a/roles/docker_komodo/tasks/main.yml
+++ b/roles/docker_komodo/tasks/main.yml
@@ -11,7 +11,7 @@
 - name: deploy Komodo DB Postgres Container
   docker_container:
     name: "komodo-db-postgres"
-    image: "ghcr.io/ferretdb/postgres-documentdb:17-0.107.0-ferretdb-2.7.0"
+    image: "ghcr.io/ferretdb/postgres-documentdb:17-0.107.0-ferretdb-2.7.0@sha256:2386795ec2aa7ae559304361979f1dc5708d383ee9020ae63dadc2940dfe58f7"
     restart_policy: always
     networks:
       - name: "komodo"
@@ -35,7 +35,7 @@
 - name: deploy Komodo DB FerretDB Container
   docker_container:
     name: "komodo-db-ferretdb"
-    image: "ghcr.io/ferretdb/ferretdb:2.7.0"
+    image: "ghcr.io/ferretdb/ferretdb:2.7.0@sha256:5706414241eb84f0515512c37b46db0f1b1eac9e5ceb7e4c2523211c184b1985"
     restart_policy: always
     networks:
       - name: "komodo"
@@ -57,7 +57,7 @@
 - name: deploy Komodo Core Container
   docker_container:
     name: "komodo-core"
-    image: "ghcr.io/moghtech/komodo-core:1.19.5"
+    image: "ghcr.io/moghtech/komodo-core:1.19.5@sha256:a1cceb4f971443b1e9f2a767788f663d0afb6244ee2135f7fe3fd1036af37ade"
     restart_policy: always
     networks:
       - name: "komodo"
@@ -91,7 +91,7 @@
 - name: deploy Komodo Periphery Container
   docker_container:
     name: "komodo-periphery"
-    image: "ghcr.io/moghtech/komodo-periphery:1.19.5"
+    image: "ghcr.io/moghtech/komodo-periphery:1.19.5@sha256:bd79cf960ed054fe8e02384322303e462448679b1149dde48bbef151417255b1"
     restart_policy: always
     networks: "{{ [{ 'name': 'komodo' }] if 'pi' in group_names else omit }}"
     ports: "{{ ['8120:8120'] if 'pi' not in group_names else omit }}"
diff --git a/roles/docker_traefik/tasks/main.yml b/roles/docker_traefik/tasks/main.yml
index 85102487..09485f63 100644
--- a/roles/docker_traefik/tasks/main.yml
+++ b/roles/docker_traefik/tasks/main.yml
@@ -39,7 +39,7 @@
 - name: deploy Traefik Container
   community.docker.docker_container:
     name: "traefik"
-    image: "traefik:3.6.2"
+    image: "traefik:3.6.2@sha256:aaf0f6185419a50c74651448c1a5bf4606bd2d2ddb7b8749eed505d55bf8b8ea"
     restart_policy: always
     networks:
       - name: "proxy"