diff --git a/.woodpecker/build.yml b/.woodpecker/build.yml
index ef4eef1..cb09a80 100644
--- a/.woodpecker/build.yml
+++ b/.woodpecker/build.yml
@@ -7,7 +7,7 @@ variables: # https://woodpecker-ci.org/docs/usage/advanced-usage
 
 steps:
   selfhosted_push:
-    image: "woodpeckerci/plugin-docker-buildx:3.0.1@sha256:c7ac0b01243466bef93863591940ce5eacf59759e9045433a6fc28d20c696d01"
+    image: "woodpeckerci/plugin-docker-buildx:3.0.1"
     settings:
       dockerfile: Dockerfile
       repo: registry.mgrote.net/python-api-server
diff --git a/.woodpecker/lint.yml b/.woodpecker/lint.yml
index ceb0c5f..5360903 100644
--- a/.woodpecker/lint.yml
+++ b/.woodpecker/lint.yml
@@ -1,21 +1,21 @@
 ---
 steps:
   gitleaks:
-    image: zricethezav/gitleaks:v8.18.2@sha256:eadfe256fa18d6a78a717abc9ed454c8e03865d1c46d627bca83977f4424901a
+    image: zricethezav/gitleaks:v8.18.2
     commands:
       - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
     when:
       - evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
 
   hadolint:
-    image: pipelinecomponents/hadolint:0.26.0@sha256:7122937006c7a9bcbb78ce764d3c2f0092f183b843ad128bc9fd6ea918e22d5b
+    image: pipelinecomponents/hadolint:0.26.0
     commands:
       - hadolint Dockerfile
     when:
       - evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
 
   shellcheck:
-    image: "koalaman/shellcheck-alpine:latest@sha256:eed99e46acb69ede0f68db4fd8f1b3b00cc09d66cb7d4d6f1f6296bd8833932d"
+    image: "koalaman/shellcheck-alpine:latest"
     commands:
       - |
         find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do