diff --git a/.github/workflows/ostree-build.yaml b/.github/workflows/ostree-build.yaml
index c794e80f..879a134a 100644
--- a/.github/workflows/ostree-build.yaml
+++ b/.github/workflows/ostree-build.yaml
@@ -17,7 +17,7 @@ jobs:
       packages: write
     timeout-minutes: 40
     container:
-      image: public.ecr.aws/docker/library/fedora:40
+      image: public.ecr.aws/docker/library/fedora:43@sha256:b00fc3cf4a22cd2d4b3bd645aa68097c3fc958b0f723fd7fe4fef26ee2dea3eb
       # Fix SELinux for the built OSTree: https://github.com/coreos/rpm-ostree/issues/1943
       options: --privileged --security-opt label:disable
     strategy: