diff --git a/k8s/deploy.yaml b/k8s/deploy.yaml
index cf395e5..6cae20b 100644
--- a/k8s/deploy.yaml
+++ b/k8s/deploy.yaml
@@ -44,7 +44,7 @@ spec:
           periodSeconds: 5
           timeoutSeconds: 5
         imagePullPolicy: Always
-        image: oci.unbound.se/unboundsoftware/unbound-site:${COMMIT}
+        image: oci.unbound.se/unboundsoftware/unbound-site@sha256:afe1908fa9eb882fd3ef2eac5dfdc1c7aa4b9932446de64dd358f447eb1b6644:${COMMIT}
         ports:
         - containerPort: 80
         resources: