diff --git a/Dockerfile b/Dockerfile
index ec26278..827b515 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
-FROM postgrest/postgrest:v10.0.0 AS api
-FROM amacneil/dbmate:1.15 AS dbmate
-FROM node:18.7.0-alpine
+FROM postgrest/postgrest:v10.0.0@sha256:db9dd042f5a4f7528b09723e08434b1ffadabeec8079e33ff38ebd8273177100 AS api
+FROM amacneil/dbmate:1.15@sha256:8fb25de3fce073e39eb3f9411af0410d0e26cc6d120544a7510b964e218abc27 AS dbmate
+FROM node:18.8.0-alpine@sha256:d5d7d8e860cb38063ac0735753bed467d1360ece5ccb7c99747726bb9399ccfa
 RUN apk add --no-cache supervisor
 COPY --from=api /bin/postgrest /usr/bin/
 COPY --from=dbmate /usr/local/bin/dbmate /usr/bin/
diff --git a/app/package.json b/app/package.json
index d94f019..4de29d5 100644
--- a/app/package.json
+++ b/app/package.json
@@ -9,7 +9,7 @@
   "engines": {
     "node": "^18.7.0"
   },
-  "packageManager": "npm@8.15.0",
+  "packageManager": "npm@8.18.0",
   "dependencies": {
     "@exampledev/new.css": "^1.1.3",
     "@lexical/plain-text": "^0.3.11",
diff --git a/compose.yml b/compose.yml
index 293a44d..07bf0e3 100644
--- a/compose.yml
+++ b/compose.yml
@@ -11,7 +11,7 @@ services:
     depends_on: [db]
   dbmate:
     profiles: [dev]
-    image: amacneil/dbmate:1.15
+    image: amacneil/dbmate:1.15@sha256:8fb25de3fce073e39eb3f9411af0410d0e26cc6d120544a7510b964e218abc27
     command: --wait up
     user: ${UID:-1000}:${GID:-1000}
     environment:
@@ -21,7 +21,7 @@ services:
       - postgres_socket:/var/run/postgresql
     depends_on: [db]
   db:
-    image: postgres:14-alpine
+    image: postgres:14-alpine@sha256:322e9d80bbe0d19df45a2cfa262b50947683b4da283afdb6bee8e549aea87bf3
     restart: unless-stopped
     healthcheck:
       test: pg_isready -U postgres