diff --git a/.gitlab/templates/pipeline.yaml.tpl b/.gitlab/templates/pipeline.yaml.tpl
index d0223a677..700ce9ad1 100644
--- a/.gitlab/templates/pipeline.yaml.tpl
+++ b/.gitlab/templates/pipeline.yaml.tpl
@@ -21,7 +21,7 @@ variables:
   CI_DOCKER_TARGET_VERSION: latest
 
 .dd-pkg-publish:
-  image: registry.ddbuild.io/agent-delivery/dd-pkg:v0.9.3
+  image: registry.ddbuild.io/agent-delivery/dd-pkg@sha256:aa20db8bf104f510a2bd4c46e941f0dfb426cb460fcbbdc5f07797de4aa51167
   tags: ["arch:arm64"]
   variables:
     IMG_SIGNING: "false"