diff --git a/kubernetes/apps/monitoring/scrutiny/app/helmrelease.yaml b/kubernetes/apps/monitoring/scrutiny/app/helmrelease.yaml
index 91bd3f517..8703c5059 100644
--- a/kubernetes/apps/monitoring/scrutiny/app/helmrelease.yaml
+++ b/kubernetes/apps/monitoring/scrutiny/app/helmrelease.yaml
@@ -37,7 +37,7 @@ spec:
           app:
             image:
               repository: ghcr.io/analogj/scrutiny
-              tag: master-web
+              tag: master-web@sha256:6f66edc0840c444b21903f66805a97cf6118d113bb3ae435cc84298b653d593f
             env:
               TZ: ${TIMEZONE}
               SCRUTINY_WEB_INFLUXDB_HOST: influx.database.svc.cluster.local
diff --git a/kubernetes/apps/monitoring/scrutiny/collector/helmrelease.yaml b/kubernetes/apps/monitoring/scrutiny/collector/helmrelease.yaml
index 36c9860ad..8ba88073d 100644
--- a/kubernetes/apps/monitoring/scrutiny/collector/helmrelease.yaml
+++ b/kubernetes/apps/monitoring/scrutiny/collector/helmrelease.yaml
@@ -40,7 +40,7 @@ spec:
           app:
             image:
               repository: ghcr.io/analogj/scrutiny
-              tag: master-collector
+              tag: master-collector@sha256:b1e4063a0186331714b6e8fa545ec88883c313e1ae9df35b600cbf689c73fe8e
             env:
               COLLECTOR_API_ENDPOINT: http://scrutiny.monitoring.svc.cluster.local:8080
               COLLECTOR_HOST_ID: