diff --git a/kube/deploy/apps/zipline/app/hr.yaml b/kube/deploy/apps/zipline/app/hr.yaml
index 07865ab6..98d8a334 100644
--- a/kube/deploy/apps/zipline/app/hr.yaml
+++ b/kube/deploy/apps/zipline/app/hr.yaml
@@ -22,7 +22,7 @@ spec:
       replicas: 1
     image:
       repository: "ghcr.io/diced/zipline"
-      tag: "3.7.7"
+      tag: "3.7.8@sha256:7eab78e72023552bf241d0a3811bed483b24ece43739e44f6afb856926a1be66"
     podLabels:
       ingress.home.arpa/nginx-internal: "allow"
       ingress.home.arpa/nginx-external: "allow"