diff --git a/Dockerrun.aws.json.production b/Dockerrun.aws.json.production
index 2e104c0..439ea7c 100644
--- a/Dockerrun.aws.json.production
+++ b/Dockerrun.aws.json.production
@@ -30,7 +30,7 @@
     },
     {
       "name": "server",
-      "image": "offen/offen:stable",
+      "image": "offen/offen:stable@sha256:87b77a8db3a3d09007e3fe01771b0c459873c7716426bc8746b5477045d38447",
       "essential": true,
       "memory": 256,
       "command": ["serve"]
diff --git a/Dockerrun.aws.json.staging b/Dockerrun.aws.json.staging
index 7a2d6e3..4640766 100644
--- a/Dockerrun.aws.json.staging
+++ b/Dockerrun.aws.json.staging
@@ -23,7 +23,7 @@
     },
     {
       "name": "server",
-      "image": "offen/offen:latest",
+      "image": "offen/offen:latest@sha256:e14297bb6c6e03e282b0ce9d38ba2b987ef2a5de16e8943aaae3c3ca75260427",
       "essential": true,
       "memory": 256,
       "command": ["serve"]
diff --git a/docker-compose.yml b/docker-compose.yml
index 5437a5c..51e2cf4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -12,7 +12,7 @@ services:
       - server
 
   server:
-    image: offen/offen:latest
+    image: offen/offen:latest@sha256:e14297bb6c6e03e282b0ce9d38ba2b987ef2a5de16e8943aaae3c3ca75260427
     command: serve
     volumes:
       - ./bootstrap.yml:/bootstrap.yml