diff --git a/Dockerfile b/Dockerfile
index 6e26241..ae83772 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -17,7 +17,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 #
-ARG BASE=debian:13.4-slim
+ARG BASE=debian:13.5-slim@sha256:b6e2a152f22a40ff69d92cb397223c906017e1391a73c952b588e51af8883bf8
 
 FROM $BASE AS minimal