diff --git a/renovate.Dockerfile b/renovate.Dockerfile
index 8e7fb3ba..5482aef8 100644
--- a/renovate.Dockerfile
+++ b/renovate.Dockerfile
@@ -12,7 +12,7 @@ FROM node:20.18.2@sha256:bc3d86568d9a9e062cdf7036367f6e2ce201925e2912758bcd3b0e2
 FROM node:22.10.0@sha256:da53547a061beb7f11f58ee2231589b999acfca89bdf6dfd740627340c879f63
 
 # EOL: 2025-06-01
-FROM node:23.0.0
+FROM node:23.0.0@sha256:9d09fa506f5b8465c5221cbd6f980e29ae0ce9a3119e2b9bc0842e6a3f37bb59
 
 # EOL: 2028-04-30
 # FROM node:24.0.0