chore: Pin image digest (#1658)

HofmeisterAn · web-flow · commit 4ea44aabd237 · 2026-03-11T15:00:11.000+01:00
diff --git a/examples/WeatherForecast/Dockerfile b/examples/WeatherForecast/Dockerfile
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build-env
+FROM mcr.microsoft.com/dotnet/sdk:10.0.3@sha256:e362a8dbcd691522456da26a5198b8f3ca1d7641c95624fadc5e3e82678bd08a AS build-env
 ARG CSPROJ_FILE_PATH="src/WeatherForecast/WeatherForecast.csproj"
 ARG RESOURCE_REAPER_SESSION_ID="00000000-0000-0000-0000-000000000000"
 LABEL "org.testcontainers.resource-reaper-session"=$RESOURCE_REAPER_SESSION_ID
@@ -10,7 +10,7 @@ RUN dotnet restore $CSPROJ_FILE_PATH
 
 RUN dotnet publish $CSPROJ_FILE_PATH --configuration Release --framework net10.0 --runtime linux-x64 --self-contained false --output out /p:DebugType=None /p:DebugSymbols=false
 
-FROM mcr.microsoft.com/dotnet/aspnet:10.0
+FROM mcr.microsoft.com/dotnet/aspnet:10.0.3@sha256:aec87aa74ddf129da573fa69f42f229a23c953a1c6fdecedea1aa6b1fe147d76
 ARG RESOURCE_REAPER_SESSION_ID="00000000-0000-0000-0000-000000000000"
 LABEL "org.testcontainers.resource-reaper-session"=$RESOURCE_REAPER_SESSION_ID
 WORKDIR /app
diff --git a/src/Testcontainers/Containers/PortForwarding.cs b/src/Testcontainers/Containers/PortForwarding.cs
@@ -61,7 +61,7 @@ public Task ExposeHostPortsAsync(IEnumerable<ushort> ports, CancellationToken ct
     [PublicAPI]
     private sealed class PortForwardingBuilder : ContainerBuilder<PortForwardingBuilder, PortForwardingContainer, PortForwardingConfiguration>
     {
-      public const string SshdImage = "testcontainers/sshd:1.2.0";
+      public const string SshdImage = "testcontainers/sshd:1.2.0@sha256:eb168d900fc070479a5e90dfac5a55ab80ee364a1d5017a5a8dc3ad8cb4e975a";
 
       public const ushort SshdPort = 22;
 
diff --git a/src/Testcontainers/Containers/ResourceReaper.cs b/src/Testcontainers/Containers/ResourceReaper.cs
@@ -33,7 +33,7 @@ public sealed class ResourceReaper : IAsyncDisposable
     /// </summary>
     private const int RetryTimeoutInSeconds = 2;
 
-    private static readonly IImage RyukImage = new DockerImage("testcontainers/ryuk:0.14.0");
+    private static readonly IImage RyukImage = new DockerImage("testcontainers/ryuk:0.14.0@sha256:7c1a8a9a47c780ed0f983770a662f80deb115d95cce3e2daa3d12115b8cd28f0");
 
     private static readonly SemaphoreSlim DefaultLock = new SemaphoreSlim(1, 1);
 
diff --git a/tests/Testcontainers.ActiveMq.Tests/Dockerfile b/tests/Testcontainers.ActiveMq.Tests/Dockerfile
@@ -1 +1 @@
-FROM apache/activemq-artemis:2.31.2
+FROM apache/activemq-artemis:2.31.2@sha256:7b9398d6cedb81f8cf7cb30c83f64ee4fd8eb1c301ed1f28951f114fa03255c0
diff --git a/tests/Testcontainers.ArangoDb.Tests/Dockerfile b/tests/Testcontainers.ArangoDb.Tests/Dockerfile
@@ -1 +1 @@
-FROM arangodb:3.11.5
+FROM arangodb:3.11.5@sha256:45dbf9477eeef34bb3737d9f48cd3bf2e5afaef01a51195191274ac15346c2a6
diff --git a/tests/Testcontainers.Azurite.Tests/Dockerfile b/tests/Testcontainers.Azurite.Tests/Dockerfile
@@ -1 +1 @@
-FROM mcr.microsoft.com/azure-storage/azurite:3.28.0
+FROM mcr.microsoft.com/azure-storage/azurite:3.28.0@sha256:b2edf4c05060390f368fef3dde4b82981b7125c763a3c6fdeb16e74b20094375
diff --git a/tests/Testcontainers.BigQuery.Tests/Dockerfile b/tests/Testcontainers.BigQuery.Tests/Dockerfile
@@ -1 +1 @@
-FROM ghcr.io/goccy/bigquery-emulator:0.4
+FROM ghcr.io/goccy/bigquery-emulator:0.4.4@sha256:967b9efed8c5d0228b8f0370ce37c387df8a799ad53a34c2e96f6a8dfcb0dda2
diff --git a/tests/Testcontainers.Bigtable.Tests/Dockerfile b/tests/Testcontainers.Bigtable.Tests/Dockerfile
@@ -1 +1 @@
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:446.0.1-emulators
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:446.0.1-emulators@sha256:7d2e60f14bb184c85bfce5f857cc7a23a0c4ab8b94e3e79007a6bb384f2d3cb3
diff --git a/tests/Testcontainers.Cassandra.Tests/Dockerfile b/tests/Testcontainers.Cassandra.Tests/Dockerfile
@@ -1 +1 @@
-FROM cassandra:5.0
+FROM cassandra:5.0.6@sha256:f56458c007cf111c663a23bd19d8e49a4228212b02a46c080f5384ded47ade6f
diff --git a/tests/Testcontainers.ClickHouse.Tests/Dockerfile b/tests/Testcontainers.ClickHouse.Tests/Dockerfile
@@ -1 +1 @@
-FROM clickhouse/clickhouse-server:23.6-alpine
+FROM clickhouse/clickhouse-server:23.6.3@sha256:d36e3dd739b0af0d4944defa61f2b7db0b2cde71236d81c2f4e71fafda5f7aac
diff --git a/tests/Testcontainers.CockroachDb.Tests/Dockerfile b/tests/Testcontainers.CockroachDb.Tests/Dockerfile
@@ -1 +1 @@
-FROM cockroachdb/cockroach:latest-v23.1
+FROM cockroachdb/cockroach:v23.1.30@sha256:498fd3fe0624f317551a16c9a0ac14c274b9ece1a174ae345f2d6cd81f4059df
diff --git a/tests/Testcontainers.Consul.Tests/Dockerfile b/tests/Testcontainers.Consul.Tests/Dockerfile
@@ -1 +1 @@
-FROM consul:1.15
+FROM consul:1.15.4@sha256:10084bbbed746968b0b9f8edab2f8552e44f117e35b88153a5e0a3ad1e15aa1a
diff --git a/tests/Testcontainers.CouchDb.Tests/Dockerfile b/tests/Testcontainers.CouchDb.Tests/Dockerfile
@@ -1 +1 @@
-FROM couchdb:3.3
+FROM couchdb:3.3.3@sha256:307a3f5276f64c0db28f226b7b5c180b8f2c851afa681cfb4fbb1b1fe7fd5587
diff --git a/tests/Testcontainers.Couchbase.Tests/Dockerfile b/tests/Testcontainers.Couchbase.Tests/Dockerfile
@@ -1 +1 @@
-FROM couchbase:community-7.0.2
+FROM couchbase:community-7.0.2@sha256:19698d38ea39a37df127b8aedc8a0a636e6b70d05dac2ff8ae8bd7eb23367bfe
diff --git a/tests/Testcontainers.Db2.Tests/Dockerfile b/tests/Testcontainers.Db2.Tests/Dockerfile
@@ -1 +1 @@
-FROM icr.io/db2_community/db2:12.1.0.0
+FROM icr.io/db2_community/db2:12.1.0.0@sha256:feaf79431bedf185b1fc8fcf2ac2ae020be54eb78e774d44bf467da55e63e1e2
diff --git a/tests/Testcontainers.DynamoDb.Tests/Dockerfile b/tests/Testcontainers.DynamoDb.Tests/Dockerfile
@@ -1 +1 @@
-FROM amazon/dynamodb-local:1.21.0
+FROM amazon/dynamodb-local:1.21.0@sha256:bd10279256d657b3637862ab813b3b7f1c3438395ac318ccd99b62c17f35d2d3
diff --git a/tests/Testcontainers.Elasticsearch.Tests/Dockerfile b/tests/Testcontainers.Elasticsearch.Tests/Dockerfile
@@ -1 +1 @@
-FROM elasticsearch:8.6.1
+FROM elasticsearch:8.6.1@sha256:6242ee491ce3bbdb60543ae31e095630da00a413fa7d3885966a0642734bb69d
diff --git a/tests/Testcontainers.FakeGcsServer.Tests/Dockerfile b/tests/Testcontainers.FakeGcsServer.Tests/Dockerfile
@@ -1 +1 @@
-FROM fsouza/fake-gcs-server:1.47
+FROM fsouza/fake-gcs-server:1.47.8@sha256:0eeaaeba5385c7274e8b11a9ff145569799bf17fdb8ba69226a88ff231ad0b44
diff --git a/tests/Testcontainers.FirebirdSql.Tests/Dockerfile b/tests/Testcontainers.FirebirdSql.Tests/Dockerfile
@@ -1,4 +1,4 @@
-FROM jacobalberty/firebird:v4.0
-FROM jacobalberty/firebird:2.5-sc AS fb2.5-sc
-FROM jacobalberty/firebird:2.5-ss AS fb2.5-ss
-FROM jacobalberty/firebird:v3.0 AS fb3.0
+FROM jacobalberty/firebird:v4.0.2@sha256:aebff0bb0b7833d38608c707b8d183356e811b864b790e88232c10159d8c5b81
+FROM jacobalberty/firebird:2.5-sc@sha256:bc359ae5b0b30cffeae68d9e3cca662a85e72faa4d6c10fba882e2a2263e61b5 AS v2_5-sc
+FROM jacobalberty/firebird:2.5-ss@sha256:6efd02fc057818e3f9b5da77d56997bafd883a582e666cf7e5371aefec7f84ac AS v2_5-ss
+FROM jacobalberty/firebird:v3.0.10@sha256:765807beb822a182205259dbcadf5b06df66fa6c51a746ac67d48deb981026d7 AS v3_0_10
diff --git a/tests/Testcontainers.FirebirdSql.Tests/FirebirdSqlContainerTest.cs b/tests/Testcontainers.FirebirdSql.Tests/FirebirdSqlContainerTest.cs
@@ -56,23 +56,23 @@ public class FirebirdSql25ScFixture(IMessageSink messageSink)
         : FirebirdSqlDefaultFixture(messageSink)
     {
         protected override FirebirdSqlBuilder Configure()
-            => new FirebirdSqlBuilder(TestSession.GetImageFromDockerfile(stage: "fb2.5-sc"));
+            => new FirebirdSqlBuilder(TestSession.GetImageFromDockerfile(stage: "v2_5-sc"));
     }
 
     [UsedImplicitly]
     public class FirebirdSql25SsFixture(IMessageSink messageSink)
         : FirebirdSqlDefaultFixture(messageSink)
     {
         protected override FirebirdSqlBuilder Configure()
-            => new FirebirdSqlBuilder(TestSession.GetImageFromDockerfile(stage: "fb2.5-ss"));
+            => new FirebirdSqlBuilder(TestSession.GetImageFromDockerfile(stage: "v2_5-ss"));
     }
 
     [UsedImplicitly]
-    public class FirebirdSql30Fixture(IMessageSink messageSink)
+    public class FirebirdSql3010Fixture(IMessageSink messageSink)
         : FirebirdSqlDefaultFixture(messageSink)
     {
         protected override FirebirdSqlBuilder Configure()
-            => new FirebirdSqlBuilder(TestSession.GetImageFromDockerfile(stage: "fb3.0"));
+            => new FirebirdSqlBuilder(TestSession.GetImageFromDockerfile(stage: "v3_0_10"));
     }
 
     [UsedImplicitly]
@@ -100,8 +100,8 @@ public sealed class FirebirdSql25SsConfiguration(FirebirdSql25SsFixture fixture)
         : FirebirdSqlContainerTest(fixture), IClassFixture<FirebirdSql25SsFixture>;
 
     [UsedImplicitly]
-    public sealed class FirebirdSql30Configuration(FirebirdSql30Fixture fixture)
-        : FirebirdSqlContainerTest(fixture), IClassFixture<FirebirdSql30Fixture>;
+    public sealed class FirebirdSql3010Configuration(FirebirdSql3010Fixture fixture)
+        : FirebirdSqlContainerTest(fixture), IClassFixture<FirebirdSql3010Fixture>;
 
     [UsedImplicitly]
     public sealed class FirebirdSqlSysdbaConfiguration(FirebirdSqlSysdbaFixture fixture)
diff --git a/tests/Testcontainers.Firestore.Tests/Dockerfile b/tests/Testcontainers.Firestore.Tests/Dockerfile
@@ -1 +1 @@
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:446.0.1-emulators
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:446.0.1-emulators@sha256:7d2e60f14bb184c85bfce5f857cc7a23a0c4ab8b94e3e79007a6bb384f2d3cb3
diff --git a/tests/Testcontainers.Grafana.Tests/Dockerfile b/tests/Testcontainers.Grafana.Tests/Dockerfile
@@ -1 +1 @@
-FROM grafana/grafana:12.2
+FROM grafana/grafana:12.2.7@sha256:02193eaeb4a805593f0a2111e9385fc59d7b8cf76e69cfc3145e12ca944b8b17
diff --git a/tests/Testcontainers.InfluxDb.Tests/Dockerfile b/tests/Testcontainers.InfluxDb.Tests/Dockerfile
@@ -1 +1 @@
-FROM influxdb:2.7
+FROM influxdb:2.7.12@sha256:3de4b6d4a18415d3d0e3b1c6409be46630bf6e5a01fcab3000b00c5c809128df
diff --git a/tests/Testcontainers.JanusGraph.Tests/Dockerfile b/tests/Testcontainers.JanusGraph.Tests/Dockerfile
@@ -1 +1 @@
-FROM janusgraph/janusgraph:1.0.0
+FROM janusgraph/janusgraph:1.0.0@sha256:164893be6d2bb20d07729413fbae7e844d26ddbb2ebdad4cd3bad9187f464faa
diff --git a/tests/Testcontainers.K3s.Tests/Dockerfile b/tests/Testcontainers.K3s.Tests/Dockerfile
@@ -1 +1 @@
-FROM rancher/k3s:v1.26.2-k3s1
+FROM rancher/k3s:v1.26.2-k3s1@sha256:a0a409f92f0d0a51b5688f055327035ad3bb8fba5ef73f698c5fb09481039804
diff --git a/tests/Testcontainers.Kafka.Tests/Dockerfile b/tests/Testcontainers.Kafka.Tests/Dockerfile
@@ -1,3 +1,3 @@
-FROM confluentinc/cp-kafka:7.5.12
-FROM apache/kafka:4.1.1 AS kafka4.1.1
-FROM apache/kafka-native:4.1.1 AS kafka-native4.1.1
+FROM confluentinc/cp-kafka:7.5.12@sha256:997883c60e6f1207fb5f779c7a8fdae57312a17f446fd5ea3eb8b73f52d4a1cf
+FROM apache/kafka:4.1.1@sha256:0bc1bb2478f45b6cea78864df86acdc11e8df2c5172477819a4d12942cbe5d40 AS apache-v4_1_1
+FROM apache/kafka-native:4.1.1@sha256:b8faca36f5385f90e46861ea0b2f532ebed86e9b2868b717c75a67f6fda0c7ce AS apache-native-v4_1_1
diff --git a/tests/Testcontainers.Kafka.Tests/KafkaContainerTest.cs b/tests/Testcontainers.Kafka.Tests/KafkaContainerTest.cs
@@ -100,7 +100,7 @@ public KafkaZooKeeperConfiguration()
     public sealed class ApacheKafkaConfiguration : KafkaContainerTest
     {
         public ApacheKafkaConfiguration()
-            : base(new KafkaBuilder(TestSession.GetImageFromDockerfile(stage: "kafka4.1.1"))
+            : base(new KafkaBuilder(TestSession.GetImageFromDockerfile(stage: "apache-v4_1_1"))
                 .Build())
         {
         }
@@ -110,7 +110,7 @@ public ApacheKafkaConfiguration()
     public sealed class ApacheKafkaNativeConfiguration : KafkaContainerTest
     {
         public ApacheKafkaNativeConfiguration()
-            : base(new KafkaBuilder(TestSession.GetImageFromDockerfile(stage: "kafka-native4.1.1"))
+            : base(new KafkaBuilder(TestSession.GetImageFromDockerfile(stage: "apache-native-v4_1_1"))
                 .Build())
         {
         }
diff --git a/tests/Testcontainers.Keycloak.Tests/Dockerfile b/tests/Testcontainers.Keycloak.Tests/Dockerfile
@@ -1,3 +1,3 @@
-FROM quay.io/keycloak/keycloak:21.1
-FROM quay.io/keycloak/keycloak:25.0 AS keycloak25.0
-FROM quay.io/keycloak/keycloak:26.0 AS keycloak26.0
+FROM quay.io/keycloak/keycloak:21.1.2@sha256:3408c186dde4a95c2b99ef1290721bf1d253d64ba3a1de0a46c667b8288051f0
+FROM quay.io/keycloak/keycloak:25.0.6@sha256:82c5b7a110456dbd42b86ea572e728878549954cc8bd03cd65410d75328095d2 AS v25_0_6
+FROM quay.io/keycloak/keycloak:26.0.8@sha256:09a381c715ab0b111835b70f2905955274843a219c6f27efb348e4d9f4086858 AS v26_0_8
diff --git a/tests/Testcontainers.Keycloak.Tests/KeycloakContainerTest.cs b/tests/Testcontainers.Keycloak.Tests/KeycloakContainerTest.cs
@@ -73,7 +73,7 @@ public KeycloakDefaultConfiguration()
     public sealed class KeycloakV25Configuration : KeycloakContainerTest
     {
         public KeycloakV25Configuration()
-            : base(new KeycloakBuilder(TestSession.GetImageFromDockerfile(stage: "keycloak25.0")).Build())
+            : base(new KeycloakBuilder(TestSession.GetImageFromDockerfile(stage: "v25_0_6")).Build())
         {
         }
     }
@@ -82,7 +82,7 @@ public KeycloakV25Configuration()
     public sealed class KeycloakV26Configuration : KeycloakContainerTest
     {
         public KeycloakV26Configuration()
-            : base(new KeycloakBuilder(TestSession.GetImageFromDockerfile(stage: "keycloak26.0")).Build())
+            : base(new KeycloakBuilder(TestSession.GetImageFromDockerfile(stage: "v26_0_8")).Build())
         {
         }
     }
diff --git a/tests/Testcontainers.KurrentDb.Tests/Dockerfile b/tests/Testcontainers.KurrentDb.Tests/Dockerfile
@@ -1 +1 @@
-FROM kurrentplatform/kurrentdb:25.1
+FROM kurrentplatform/kurrentdb:25.1.4@sha256:455ce2af7120d8fc72ea2d51a80321d12334e7ed409a7d0357f05f32a9f91f41
diff --git a/tests/Testcontainers.LocalStack.Tests/Dockerfile b/tests/Testcontainers.LocalStack.Tests/Dockerfile
@@ -1,2 +1,2 @@
-FROM localstack/localstack:2.0
-FROM localstack/localstack:1.4 AS localstack1.4
+FROM localstack/localstack:2.0.2@sha256:2b4ec60261238bfc9573193380724ed4b9ee9fa0f39726275cd8feb48a254219
+FROM localstack/localstack:1.4.0@sha256:7badf31c550f81151c485980e17542592942d7f05acc09723c5f276d41b5927d AS v1_4_0
diff --git a/tests/Testcontainers.LocalStack.Tests/LocalStackContainerTest.cs b/tests/Testcontainers.LocalStack.Tests/LocalStackContainerTest.cs
@@ -171,7 +171,7 @@ public LocalStackDefaultConfiguration()
     public sealed class LocalStackV1Configuration : LocalStackContainerTest
     {
         public LocalStackV1Configuration()
-            : base(new LocalStackBuilder(TestSession.GetImageFromDockerfile(stage: "localstack1.4")).Build())
+            : base(new LocalStackBuilder(TestSession.GetImageFromDockerfile(stage: "v1_4_0")).Build())
         {
         }
     }
diff --git a/tests/Testcontainers.LowkeyVault.Tests/Dockerfile b/tests/Testcontainers.LowkeyVault.Tests/Dockerfile
@@ -1 +1 @@
-FROM nagyesta/lowkey-vault:2.7.1-ubi9-minimal
+FROM nagyesta/lowkey-vault:2.7.1-ubi9-minimal@sha256:68405f7d648478f2fd797e347f8eba295cb02cfa2acdb55b9ab1050bc8147021
diff --git a/tests/Testcontainers.MariaDb.Tests/Dockerfile b/tests/Testcontainers.MariaDb.Tests/Dockerfile
@@ -1 +1 @@
-FROM mariadb:10.10
+FROM mariadb:10.10.7@sha256:334b315c10e5d0db1dc2305bfa27f7760335272a157364158dc30b10b70dfa9b
diff --git a/tests/Testcontainers.Milvus.Tests/Dockerfile b/tests/Testcontainers.Milvus.Tests/Dockerfile
@@ -1 +1 @@
-FROM milvusdb/milvus:v2.3.10
+FROM milvusdb/milvus:v2.3.10@sha256:cf484d4ed5a29d4f33664152a0793aeff6b19a03da8f7ce07a9a4834ce2ed2dd
diff --git a/tests/Testcontainers.Minio.Tests/Dockerfile b/tests/Testcontainers.Minio.Tests/Dockerfile
@@ -1 +1 @@
-FROM minio/minio:RELEASE.2023-01-31T02-24-19Z
+FROM minio/minio:RELEASE.2023-01-31T02-24-19Z@sha256:c5cf013c67de7854d445afed42c07810c402ce5afb441af02877f8f3dc045ec4
diff --git a/tests/Testcontainers.MongoDb.Tests/Dockerfile b/tests/Testcontainers.MongoDb.Tests/Dockerfile
@@ -1,3 +1,3 @@
-FROM mongo:6.0
-FROM mongo:5.0 AS mongo5.0
-FROM mongo:4.4 AS mongo4.4
+FROM mongo:6.0.27@sha256:03cda579c8caad6573cb98c2b3d5ff5ead452a6450561129b89595b4b9c18de2
+FROM mongo:5.0.32@sha256:5e3e87afd24d75e722884d777c5713d254f7e88ba65381b5d6484f75a21b73e3 AS v5_0_32
+FROM mongo:4.4.30@sha256:4be76f674fc4b27859816811b8baa3c51830eb1dbf4ca81a51e26b79edd662ef AS v4_4_30
diff --git a/tests/Testcontainers.MongoDb.Tests/MongoDbContainerTest.cs b/tests/Testcontainers.MongoDb.Tests/MongoDbContainerTest.cs
@@ -112,7 +112,7 @@ public MongoDbNoAuthConfiguration()
     public sealed class MongoDbV5Configuration : MongoDbContainerTest
     {
         public MongoDbV5Configuration()
-            : base(new MongoDbBuilder(TestSession.GetImageFromDockerfile(stage: "mongo5.0")).Build())
+            : base(new MongoDbBuilder(TestSession.GetImageFromDockerfile(stage: "v5_0_32")).Build())
         {
         }
     }
@@ -121,7 +121,7 @@ public MongoDbV5Configuration()
     public sealed class MongoDbV4Configuration : MongoDbContainerTest
     {
         public MongoDbV4Configuration()
-            : base(new MongoDbBuilder(TestSession.GetImageFromDockerfile(stage: "mongo4.4")).Build(), true /* Replica set status returns "ok" in MongoDB 4.4 without initialization. */)
+            : base(new MongoDbBuilder(TestSession.GetImageFromDockerfile(stage: "v4_4_30")).Build(), true /* Replica set status returns "ok" in MongoDB 4.4 without initialization. */)
         {
         }
     }
diff --git a/tests/Testcontainers.Mosquitto.Tests/Dockerfile b/tests/Testcontainers.Mosquitto.Tests/Dockerfile
@@ -1 +1 @@
-FROM eclipse-mosquitto:2.0
+FROM eclipse-mosquitto:2.0.22@sha256:6852da90a65dfff7aa3a1c8b249e92bb83c17ea8bbcce56bedff8707332a1a29
diff --git a/tests/Testcontainers.MsSql.Tests/Dockerfile b/tests/Testcontainers.MsSql.Tests/Dockerfile
@@ -1 +1 @@
-FROM mcr.microsoft.com/mssql/server:2022-CU14-ubuntu-22.04
+FROM mcr.microsoft.com/mssql/server:2022-CU14-ubuntu-22.04@sha256:c1aa8afe9b06eab64c9774a4802dcd032205d1be785b1fd51e1c0151e7586b74
diff --git a/tests/Testcontainers.MySql.Tests/Dockerfile b/tests/Testcontainers.MySql.Tests/Dockerfile
@@ -1,2 +1,2 @@
-FROM mysql:8.0
-FROM mysql:8.0.28 AS mysql8.0.28
+FROM mysql:8.0.45@sha256:a3dff78d876222746a0bacc36dd7e4bf9e673c85fb7ee0d12ed25bd32c43c19b
+FROM mysql:8.0.28@sha256:e9fee3e714fd69cd2ccfa0c6a141fac0a60f2a02f72d43c0e7055601aaf481b0 AS v8_0_28
diff --git a/tests/Testcontainers.MySql.Tests/MySqlContainerTest.cs b/tests/Testcontainers.MySql.Tests/MySqlContainerTest.cs
@@ -65,7 +65,7 @@ public class MySqlGitHubIssue1142Fixture(IMessageSink messageSink)
     {
         // https://github.com/testcontainers/testcontainers-dotnet/issues/1142.
         protected override MySqlBuilder Configure()
-            => new MySqlBuilder(TestSession.GetImageFromDockerfile(stage: "mysql8.0.28"));
+            => new MySqlBuilder(TestSession.GetImageFromDockerfile(stage: "v8_0_28"));
     }
 
     [UsedImplicitly]
diff --git a/tests/Testcontainers.Nats.Tests/Dockerfile b/tests/Testcontainers.Nats.Tests/Dockerfile
@@ -1 +1 @@
-FROM nats:2.9
+FROM nats:2.9.25@sha256:00e8be056a52303b8462161e443d5dca02115cbbed7562da42943857a33bf385
diff --git a/tests/Testcontainers.Neo4j.Tests/Dockerfile b/tests/Testcontainers.Neo4j.Tests/Dockerfile
@@ -1 +1 @@
-FROM neo4j:5.4
+FROM neo4j:5.4.0@sha256:e625de2c59795afe0d58c81aed32a3771858e069c537123fb55ae958246cd66b
diff --git a/tests/Testcontainers.Ollama.Tests/Dockerfile b/tests/Testcontainers.Ollama.Tests/Dockerfile
@@ -1 +1 @@
-FROM ollama/ollama:0.6.6
+FROM ollama/ollama:0.17.7@sha256:0ff452f6a4c3c5bb4ab063a1db190b261d5834741a519189ed5301d50e4434d1
diff --git a/tests/Testcontainers.OpenSearch.Tests/Dockerfile b/tests/Testcontainers.OpenSearch.Tests/Dockerfile
@@ -1 +1 @@
-FROM opensearchproject/opensearch:2.12.0
+FROM opensearchproject/opensearch:2.12.0@sha256:645d3d9390ade7ebef988d3c9bc61a6616f1863ff41efe97e2347d6bf7972504
diff --git a/tests/Testcontainers.Oracle.Tests/Dockerfile b/tests/Testcontainers.Oracle.Tests/Dockerfile
@@ -1 +1 @@
-FROM gvenzl/oracle-xe:21.3.0-slim-faststart
+FROM gvenzl/oracle-xe:21.3.0-slim-faststart@sha256:f82bccdf6020d27373fdf0e93046b63eb3f777a0289e329d9839feebaf4555de
diff --git a/tests/Testcontainers.Papercut.Tests/Dockerfile b/tests/Testcontainers.Papercut.Tests/Dockerfile
@@ -1 +1 @@
-FROM changemakerstudiosus/papercut-smtp:7.0
+FROM changemakerstudiosus/papercut-smtp:7.0.2@sha256:edaad598b6d2f84e73e9f7f7f3e05f04da54677643664854c7a141fabd5835f7
diff --git a/tests/Testcontainers.Playwright.Tests/Dockerfile b/tests/Testcontainers.Playwright.Tests/Dockerfile
@@ -1,3 +1,3 @@
 # NOTE: The tag "v{Major}.{Minor}" must match the exact version of the
 # Microsoft.Playwright package specified in Directory.Packages.props.
-FROM mcr.microsoft.com/playwright:v1.55.1
+FROM mcr.microsoft.com/playwright:v1.55.1@sha256:2f29369043d81d6d69a815ceb80760f55e85f5020371ad06a4d996f18503ad1c
diff --git a/tests/Testcontainers.PostgreSql.Tests/Dockerfile b/tests/Testcontainers.PostgreSql.Tests/Dockerfile
@@ -1 +1 @@
-FROM postgres:15.1
+FROM postgres:15.17@sha256:f30e3de0ac9cc938dac627ef2231099867c694b5f949fadb924c8c977428c399
diff --git a/tests/Testcontainers.PubSub.Tests/Dockerfile b/tests/Testcontainers.PubSub.Tests/Dockerfile
@@ -1 +1 @@
-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:446.0.1-emulators
+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:446.0.1-emulators@sha256:7d2e60f14bb184c85bfce5f857cc7a23a0c4ab8b94e3e79007a6bb384f2d3cb3
diff --git a/tests/Testcontainers.Pulsar.Tests/Dockerfile b/tests/Testcontainers.Pulsar.Tests/Dockerfile
@@ -1,2 +1,2 @@
-FROM apachepulsar/pulsar:3.0.9
-FROM apachepulsar/pulsar:4.0.2 AS pulsar4.0.2
+FROM apachepulsar/pulsar:3.0.9@sha256:480856a9ab7cf72936cebd3fa21489647b94a4a8204e1706c632a36047e97b8b
+FROM apachepulsar/pulsar:4.0.2@sha256:8c0729055f56a8e30dec5d3cc7f85bd1aea9485858e95da57b96b9e43833b910 AS v4_0_2
diff --git a/tests/Testcontainers.Pulsar.Tests/PulsarContainerTest.cs b/tests/Testcontainers.Pulsar.Tests/PulsarContainerTest.cs
diff --git a/tests/Testcontainers.Qdrant.Tests/Dockerfile b/tests/Testcontainers.Qdrant.Tests/Dockerfile
diff --git a/tests/Testcontainers.RabbitMq.Tests/Dockerfile b/tests/Testcontainers.RabbitMq.Tests/Dockerfile
diff --git a/tests/Testcontainers.Redis.Tests/Dockerfile b/tests/Testcontainers.Redis.Tests/Dockerfile
diff --git a/tests/Testcontainers.Redpanda.Tests/Dockerfile b/tests/Testcontainers.Redpanda.Tests/Dockerfile
diff --git a/tests/Testcontainers.Seq.Tests/Dockerfile b/tests/Testcontainers.Seq.Tests/Dockerfile
diff --git a/tests/Testcontainers.Temporal.Tests/Dockerfile b/tests/Testcontainers.Temporal.Tests/Dockerfile
diff --git a/tests/Testcontainers.Tests/Assets/Dockerfile b/tests/Testcontainers.Tests/Assets/Dockerfile
diff --git a/tests/Testcontainers.Tests/Assets/healthWaitStrategy/Dockerfile b/tests/Testcontainers.Tests/Assets/healthWaitStrategy/Dockerfile
diff --git a/tests/Testcontainers.Toxiproxy.Tests/Dockerfile b/tests/Testcontainers.Toxiproxy.Tests/Dockerfile
diff --git a/tests/Testcontainers.Typesense.Tests/Dockerfile b/tests/Testcontainers.Typesense.Tests/Dockerfile
diff --git a/tests/Testcontainers.Weaviate.Tests/Dockerfile b/tests/Testcontainers.Weaviate.Tests/Dockerfile
diff --git a/tests/Testcontainers.WebDriver.Tests/Dockerfile b/tests/Testcontainers.WebDriver.Tests/Dockerfile

Original file line number	Diff line number	Diff line change
`@@ -61,7 +61,7 @@ public Task ExposeHostPortsAsync(IEnumerable<ushort> ports, CancellationToken ct`
`61`	`61`	`[PublicAPI]`
`62`	`62`	`private sealed class PortForwardingBuilder : ContainerBuilder<PortForwardingBuilder, PortForwardingContainer, PortForwardingConfiguration>`
`63`	`63`	`{`
`64`		`- public const string SshdImage = "testcontainers/sshd:1.2.0";`
	`64`	`+ public const string SshdImage = "testcontainers/sshd:1.2.0@sha256:eb168d900fc070479a5e90dfac5a55ab80ee364a1d5017a5a8dc3ad8cb4e975a";`
`65`	`65`
`66`	`66`	`public const ushort SshdPort = 22;`
`67`	`67`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM apache/activemq-artemis:2.31.2`
	`1`	`+FROM apache/activemq-artemis:2.31.2@sha256:7b9398d6cedb81f8cf7cb30c83f64ee4fd8eb1c301ed1f28951f114fa03255c0`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM arangodb:3.11.5`
	`1`	`+FROM arangodb:3.11.5@sha256:45dbf9477eeef34bb3737d9f48cd3bf2e5afaef01a51195191274ac15346c2a6`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM mcr.microsoft.com/azure-storage/azurite:3.28.0`
	`1`	`+FROM mcr.microsoft.com/azure-storage/azurite:3.28.0@sha256:b2edf4c05060390f368fef3dde4b82981b7125c763a3c6fdeb16e74b20094375`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM ghcr.io/goccy/bigquery-emulator:0.4`
	`1`	`+FROM ghcr.io/goccy/bigquery-emulator:0.4.4@sha256:967b9efed8c5d0228b8f0370ce37c387df8a799ad53a34c2e96f6a8dfcb0dda2`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:446.0.1-emulators`
	`1`	`+FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:446.0.1-emulators@sha256:7d2e60f14bb184c85bfce5f857cc7a23a0c4ab8b94e3e79007a6bb384f2d3cb3`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM cassandra:5.0`
	`1`	`+FROM cassandra:5.0.6@sha256:f56458c007cf111c663a23bd19d8e49a4228212b02a46c080f5384ded47ade6f`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM clickhouse/clickhouse-server:23.6-alpine`
	`1`	`+FROM clickhouse/clickhouse-server:23.6.3@sha256:d36e3dd739b0af0d4944defa61f2b7db0b2cde71236d81c2f4e71fafda5f7aac`