diff --git a/Dockerfile b/Dockerfile
index a6926af..85628ef 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,5 +6,5 @@ ARG FROM
 FROM ${FROM}
 ENV PATH=/var/lib/openstack/bin:$PATH
 RUN --mount=type=bind,source=bindep.txt,target=/bindep.txt \
-    --mount=type=bind,from=ghcr.io/vexxhost/build-utils:latest,source=/bin,target=/build \
+    --mount=type=bind,from=ghcr.io/vexxhost/build-utils:latest@sha256:79d7579c2300391cc9cdd9ca17b9031750a748fb84a87ebb1f1a920e1fcb4740,source=/bin,target=/build \
     /build/install-bindep-packages