diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml
index e506ab187..f117c19eb 100644
--- a/.github/workflows/prepare-release.yml
+++ b/.github/workflows/prepare-release.yml
@@ -60,13 +60,13 @@ jobs:
             strip: aarch64-linux-musl-strip
             download: true
             container:
-              image: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine
+              image: ghcr.io/napi-rs/napi-rs/nodejs-rust@sha256:78c9ab1f117f8c535b93c4b91a2f19063dda6e4dba48a6187df49810625992c1
           - os: ubuntu-latest
             target: x86_64-unknown-linux-musl
             strip: strip
             download: true
             container:
-              image: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine
+              image: ghcr.io/napi-rs/napi-rs/nodejs-rust@sha256:78c9ab1f117f8c535b93c4b91a2f19063dda6e4dba48a6187df49810625992c1
 
     name: Build ${{ matrix.target }} (oxide)
     runs-on: ${{ matrix.os }}
diff --git a/.github/workflows/release-insiders.yml b/.github/workflows/release-insiders.yml
index f7792244f..1c6c307fd 100644
--- a/.github/workflows/release-insiders.yml
+++ b/.github/workflows/release-insiders.yml
@@ -59,13 +59,13 @@ jobs:
             strip: aarch64-linux-musl-strip
             download: true
             container:
-              image: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine
+              image: ghcr.io/napi-rs/napi-rs/nodejs-rust@sha256:78c9ab1f117f8c535b93c4b91a2f19063dda6e4dba48a6187df49810625992c1
           - os: ubuntu-latest
             target: x86_64-unknown-linux-musl
             strip: strip
             download: true
             container:
-              image: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine
+              image: ghcr.io/napi-rs/napi-rs/nodejs-rust@sha256:78c9ab1f117f8c535b93c4b91a2f19063dda6e4dba48a6187df49810625992c1
 
     name: Build ${{ matrix.target }} (oxide)
     runs-on: ${{ matrix.os }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3b0aeab20..53347e808 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -59,13 +59,13 @@ jobs:
             strip: aarch64-linux-musl-strip
             download: true
             container:
-              image: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine
+              image: ghcr.io/napi-rs/napi-rs/nodejs-rust@sha256:78c9ab1f117f8c535b93c4b91a2f19063dda6e4dba48a6187df49810625992c1
           - os: ubuntu-latest
             target: x86_64-unknown-linux-musl
             strip: strip
             download: true
             container:
-              image: ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine
+              image: ghcr.io/napi-rs/napi-rs/nodejs-rust@sha256:78c9ab1f117f8c535b93c4b91a2f19063dda6e4dba48a6187df49810625992c1
 
     name: Build ${{ matrix.target }} (oxide)
     runs-on: ${{ matrix.os }}