diff --git a/Makefile b/Makefile
index 14ad93c..0a36b5f 100644
--- a/Makefile
+++ b/Makefile
@@ -11,7 +11,7 @@ dcmd = DOCKER_BUILDKIT=1 docker
 pruneargs = system prune -af
 dcmdrun = $(dcmd) run --rm
 wdir = /src
-kanikoimg = gcr.io/kaniko-project/executor
+kanikoimg = gcr.io/kaniko-project/executor@sha256:6ecc43ae139ad8cfa11604b592aaedddcabff8cef469eda303f1fb5afe5e3034
 dargskaniko = -w=$(wdir) -v $$(pwd):$(wdir):z $(kanikoimg)
 kanikoargs = -c=$(wdir) --use-new-run --snapshotMode=redo --no-push
 krelease = $(dcmdrun) $(dargskaniko) -f=$(dfile) $(kanikoargs)