diff --git a/.gitea/workflows/dev-verify.yml b/.gitea/workflows/dev-verify.yml
index 73dcb0d..0d57d0a 100644
--- a/.gitea/workflows/dev-verify.yml
+++ b/.gitea/workflows/dev-verify.yml
@@ -13,7 +13,7 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     container:
-      image: gradle:8.14.5-jdk21
+      image: gradle:8.14.5-jdk21@sha256:a8741ddd2055e9948af8082598ef7b44e6077be246f03a79d42204ffdd6153b1
     env:
       GITEA_TOKEN: ${{ github.token }}
       GITEA_API_URL: ${{ github.server_url }}/api/v1
diff --git a/.gitea/workflows/main-release.yml b/.gitea/workflows/main-release.yml
index bea9adb..6bd9b9e 100644
--- a/.gitea/workflows/main-release.yml
+++ b/.gitea/workflows/main-release.yml
@@ -16,7 +16,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     container:
-      image: gradle:8.14.5-jdk21
+      image: gradle:8.14.5-jdk21@sha256:a8741ddd2055e9948af8082598ef7b44e6077be246f03a79d42204ffdd6153b1
     strategy:
       fail-fast: false
       matrix:
@@ -115,7 +115,7 @@ jobs:
     if: github.event_name != 'pull_request'
     runs-on: ubuntu-latest
     container:
-      image: gradle:8.14.5-jdk21
+      image: gradle:8.14.5-jdk21@sha256:a8741ddd2055e9948af8082598ef7b44e6077be246f03a79d42204ffdd6153b1
     env:
       GITEA_TOKEN: ${{ github.token }}
       GITEA_API_URL: ${{ github.server_url }}/api/v1