diff --git a/Dockerfile b/Dockerfile
index 652b3ab941..ed9265b043 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:experimental
-FROM quay.io/unstructured-io/base-images:rocky9.2-3 as base
+FROM quay.io/unstructured-io/base-images:rocky9.2-3@sha256:004db0842ff6d99622cac0c08feac15be16fdddfe19eab003d4be72b6dc1a8e9 as base
 
 # NOTE(crag): NB_USER ARG for mybinder.org compat:
 #             https://mybinder.readthedocs.io/en/latest/tutorials/dockerfile.html