diff --git a/.woodpecker/lint.yml b/.woodpecker/lint.yml
index 057bed8..1214f72 100644
--- a/.woodpecker/lint.yml
+++ b/.woodpecker/lint.yml
@@ -1,7 +1,7 @@
 ---
 steps:
   gitleaks:
-    image: zricethezav/gitleaks:v8.18.0
+    image: zricethezav/gitleaks:v8.18.0@sha256:e5f6d1a62786affd1abd882ecc73e9353ce78adea1650711f6e351767723712d
     commands:
       - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
     when: