diff --git a/state-manager/Dockerfile b/state-manager/Dockerfile
index 0f9cb814..431071cd 100644
--- a/state-manager/Dockerfile
+++ b/state-manager/Dockerfile
@@ -1,5 +1,10 @@
-FROM python:3.12-slim-bookworm
-COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
+ARG UV_VERSION=0.4.28
+ARG UV_DIGEST=sha256:REPLACE_WITH_MANIFEST_DIGEST
+FROM ghcr.io/astral-sh/uv:${UV_VERSION}@${UV_DIGEST} AS uv
+ARG PYTHON_DIGEST=sha256:REPLACE_WITH_MANIFEST_DIGEST
+FROM python:3.12-slim-bookworm@${PYTHON_DIGEST}
+
+COPY --from=uv /uv /usr/local/bin/uv
 
 WORKDIR /api-server