diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b9a1e53a..94f212c1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -116,7 +116,7 @@ jobs:
 
     services:
       postgres:
-        image: postgres:16.6
+        image: postgres:16.6@sha256:5620f242bbc0e17478556102327e7efcf60ab48de3607c9e0ea98800841785ec
         env:
           POSTGRES_PASSWORD: postgres
         options: >-
diff --git a/compose.yml b/compose.yml
index 78036adf..71b46400 100644
--- a/compose.yml
+++ b/compose.yml
@@ -18,7 +18,7 @@ services:
       postgres:
         condition: service_healthy
   postgres:
-    image: postgres:16.6
+    image: postgres:16.6@sha256:5620f242bbc0e17478556102327e7efcf60ab48de3607c9e0ea98800841785ec
     environment:
       - POSTGRES_PASSWORD=postgres
     ports: