diff --git a/Dockerfile.tor-daemon b/Dockerfile.tor-daemon
index 6d7c5e6..668edee 100644
--- a/Dockerfile.tor-daemon
+++ b/Dockerfile.tor-daemon
@@ -1 +1 @@
-FROM docker.io/rinsecode/tor:0.4.8.22-r1 AS tor
+FROM docker.io/rinsecode/tor:0.4.8.22@sha256:8598cba8151ce24326a0c5c05ce2fe8d4ba583eabf5d509c8052dc3bb2b4cd4c AS tor
diff --git a/Dockerfile.tor-daemon-manager b/Dockerfile.tor-daemon-manager
index 2fc9a18..a269f46 100644
--- a/Dockerfile.tor-daemon-manager
+++ b/Dockerfile.tor-daemon-manager
@@ -10,7 +10,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
     --mount=type=cache,target=/go/pkg \
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH go build -a -ldflags="-s -w" -o /out/tor-local-manager ./agents/tor/main.go
 
-FROM docker.io/rinsecode/tor:0.4.8.22-r1 AS tor
+FROM docker.io/rinsecode/tor:0.4.8.22@sha256:8598cba8151ce24326a0c5c05ce2fe8d4ba583eabf5d509c8052dc3bb2b4cd4c AS tor
 
 RUN mkdir -p /app
 COPY --from=builder --chmod=0555 /out/tor-local-manager /app