diff --git a/ci-scripts/rhdh-setup/template/backstage/helm/oauth2-container-patch.yaml b/ci-scripts/rhdh-setup/template/backstage/helm/oauth2-container-patch.yaml
index 78fd409..dcfb811 100644
--- a/ci-scripts/rhdh-setup/template/backstage/helm/oauth2-container-patch.yaml
+++ b/ci-scripts/rhdh-setup/template/backstage/helm/oauth2-container-patch.yaml
@@ -26,7 +26,7 @@ extraContainers:
     containerPort: 4180
     protocol: TCP
   imagePullPolicy: IfNotPresent
-  image: quay.io/oauth2-proxy/oauth2-proxy:latest
+  image: quay.io/oauth2-proxy/oauth2-proxy:v7.6.0
   args:
   - "--provider=oidc"
   - "--email-domain=*"
diff --git a/ci-scripts/rhdh-setup/template/backstage/olm/rhdh-oauth2.deployment.yaml b/ci-scripts/rhdh-setup/template/backstage/olm/rhdh-oauth2.deployment.yaml
index d9e8005..a01a7a6 100644
--- a/ci-scripts/rhdh-setup/template/backstage/olm/rhdh-oauth2.deployment.yaml
+++ b/ci-scripts/rhdh-setup/template/backstage/olm/rhdh-oauth2.deployment.yaml
@@ -43,7 +43,7 @@ spec:
               value: https://keycloak-${RHDH_NAMESPACE}.${OPENSHIFT_APP_DOMAIN}/auth/realms/backstage
             - name: OAUTH2_PROXY_SSL_INSECURE_SKIP_VERIFY
               value: "true"
-          image: quay.io/oauth2-proxy/oauth2-proxy:latest
+          image: quay.io/oauth2-proxy/oauth2-proxy:v7.6.0
           imagePullPolicy: IfNotPresent
           name: oauth2-proxy
           ports: