diff --git a/.gitea/workflows/package-build.yml b/.gitea/workflows/package-build.yml
index 8b735a9a..7acabcd6 100644
--- a/.gitea/workflows/package-build.yml
+++ b/.gitea/workflows/package-build.yml
@@ -249,7 +249,7 @@ jobs:
     needs: changes
     if: needs.changes.outputs.debian == 'true' || github.event_name == 'workflow_dispatch'
     container:
-      image: debian:13
+      image: debian:13@sha256:4ae67669760b807c19f23902a3fd7c121a6a70cf2ae709035674b23e712e4d62
       options: --privileged
 
     steps: