diff --git a/.devcontainer/docker-compose.yaml b/.devcontainer/docker-compose.yaml
index 9c96e2eb2..4c4de8bd6 100644
--- a/.devcontainer/docker-compose.yaml
+++ b/.devcontainer/docker-compose.yaml
@@ -32,7 +32,7 @@ services:
 
   # "cosmosdb" is the name of the Docker Compose service, and is also used as the hostname for incoming connections
   cosmosdb:
-    image: mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:vnext-preview
+    image: mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:vnext-preview@sha256:2179ac035a332e9fdd7f7deb6a025b20465572375250be6a7a4479c40b096aaf
     networks:
       - dev-network
     profiles: ['cosmosdb']
diff --git a/apps/app-backend/Dockerfile b/apps/app-backend/Dockerfile
index 8bbb1c2fd..dfc91bc7f 100644
--- a/apps/app-backend/Dockerfile
+++ b/apps/app-backend/Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/docker/library/node:20-alpine AS builder
+FROM public.ecr.aws/docker/library/node:20-alpine@sha256:1ab6fc5a31d515dc7b6b25f6acfda2001821f2c2400252b6cb61044bd9f9ad48 AS builder
 
 COPY . /workspace
 
@@ -23,7 +23,7 @@ RUN yarn workspaces focus io-services-app-backend --production
 
 # To enable ssh & remote debugging on app service change the base image to the one below
 # FROM mcr.microsoft.com/azure-functions/node:4-node20-appservice
-FROM mcr.microsoft.com/azure-functions/node:4-node20 AS runtime
+FROM mcr.microsoft.com/azure-functions/node:4-node20@sha256:d135c6ebc7d855c92b42f76b31529127964b3eca10c16331356977ecdc8be871 AS runtime
 
 ENV AzureWebJobsScriptRoot=/home/site/apps/app-backend \
     AzureFunctionsJobHost__Logging__Console__IsEnabled=true