diff --git a/.github/workflows/integration_test_ms.yml b/.github/workflows/integration_test_ms.yml
index d4728d46f..f255e776c 100644
--- a/.github/workflows/integration_test_ms.yml
+++ b/.github/workflows/integration_test_ms.yml
@@ -48,7 +48,7 @@ jobs:
 
       - name: Upload Test Results
         if: always() && (steps.int_tests.conclusion == 'success' || steps.int_tests.conclusion == 'failure')
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: cucumber-report
           path: target/cucumber-report/cucumber.html
diff --git a/docker-compose.yml b/docker-compose.yml
index 6c4f7178c..714223d3d 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -49,7 +49,7 @@ services:
       - develop-network
 
   userms:
-    image: ghcr.io/pagopa/selfcare-user-ms:latest
+    image: ghcr.io/pagopa/selfcare-user-ms:latest@sha256:c61cfc6c5d1e50d2d980e54ca1020c17e1f0c2622df5aa07871aaefe02e81a2e
     pull_policy: always
     ports:
       - '8081:8080'
@@ -61,7 +61,7 @@ services:
       - mongodb
 
   onboardingms:
-    image: ghcr.io/pagopa/selfcare-onboarding-ms:latest
+    image: ghcr.io/pagopa/selfcare-onboarding-ms:latest@sha256:62de7cd63f140584021c7c08d315fe2486a18d0a0d628384c947a495b72094db
     pull_policy: always
     ports:
       - '8080:8080'
@@ -73,7 +73,7 @@ services:
       - mongodb
 
   institutionms:
-    image: ghcr.io/pagopa/selfcare-institution-ms:latest
+    image: ghcr.io/pagopa/selfcare-institution-ms:latest@sha256:6d0aad5954d0903b3b700dcdd4731f6d0b918eae5a04bbb32958f2aba668b0c0
     pull_policy: always
     ports:
       - '8082:8082'
@@ -85,7 +85,7 @@ services:
       - mongodb
 
   usergroupms:
-    image: ghcr.io/pagopa/selfcare-user-group-ms:latest
+    image: ghcr.io/pagopa/selfcare-user-group-ms:latest@sha256:a5a7b734e895ee6c44d106290fe3d3784239a25b447caaf26caa2f87ea3932ce
     pull_policy: always
     ports:
       - '8083:8083'
diff --git a/integration-test-config/azure-cli/Dockerfile-azure-cli b/integration-test-config/azure-cli/Dockerfile-azure-cli
index ff6b9dde1..1282c3b95 100644
--- a/integration-test-config/azure-cli/Dockerfile-azure-cli
+++ b/integration-test-config/azure-cli/Dockerfile-azure-cli
@@ -1,5 +1,5 @@
 # Primo stage: usiamo un'immagine con git per clonare il repository
-FROM alpine/git AS git-stage
+FROM alpine/git@sha256:26f8647ec43523c2511b99064cb45b48f4535bce956b9377a94b289fb021e819 AS git-stage
 WORKDIR /repo
 RUN git clone https://github.com/pagopa/selfcare-infra.git