diff --git a/src/domains/example_microservice_cache/30_connectivity_test.tf b/src/domains/example_microservice_cache/30_connectivity_test.tf
index e5322aa..c1ead62 100644
--- a/src/domains/example_microservice_cache/30_connectivity_test.tf
+++ b/src/domains/example_microservice_cache/30_connectivity_test.tf
@@ -18,7 +18,7 @@ resource "kubernetes_job" "redis" {
         restart_policy = "Never"
 
         container {
-          image   = "redis"
+          image   = "redis@sha256:ea96c435dc17b011f54c6a883c3c45e7726242b075de61c6fe40a10ae6ae0f83"
           name    = var.app_name
           command = ["redis-cli"]
           args = [
diff --git a/src/domains/example_microservice_dynamodb/20_connectivity_test.tf b/src/domains/example_microservice_dynamodb/20_connectivity_test.tf
index ea85008..7941392 100644
--- a/src/domains/example_microservice_dynamodb/20_connectivity_test.tf
+++ b/src/domains/example_microservice_dynamodb/20_connectivity_test.tf
@@ -42,7 +42,7 @@ resource "kubernetes_job" "awscli" {
         service_account_name = kubernetes_service_account.database_reader.metadata[0].name
 
         container {
-          image = "amazon/aws-cli"
+          image = "amazon/aws-cli@sha256:daea1a7fc52f8a7e9f9527bab66f3eefd8f59c68b0931959cda10dad47004681"
           name  = var.app_name
           args  = ["dynamodb", "get-item", "--table-name", aws_dynamodb_table.entries.name, "--key", "Type={S=counter}"]
 
diff --git a/src/domains/example_microservice_kafka/30_connectivity_test.tf b/src/domains/example_microservice_kafka/30_connectivity_test.tf
index 319a7f9..6c8df16 100644
--- a/src/domains/example_microservice_kafka/30_connectivity_test.tf
+++ b/src/domains/example_microservice_kafka/30_connectivity_test.tf
@@ -18,7 +18,7 @@ resource "kubernetes_job" "kcat" {
         restart_policy = "Never"
 
         container {
-          image = "edenhill/kcat:1.7.1"
+          image = "edenhill/kcat:1.7.1@sha256:8f16a5fed099931ce1122420b7473efe467ff9841d53680b99db25dd1723d711"
           name  = var.app_name
           args = [
             "-b", aws_msk_cluster.this.bootstrap_brokers,
diff --git a/src/domains/example_microservice_rds/30_connectivity_test.tf b/src/domains/example_microservice_rds/30_connectivity_test.tf
index 56fd927..406c859 100644
--- a/src/domains/example_microservice_rds/30_connectivity_test.tf
+++ b/src/domains/example_microservice_rds/30_connectivity_test.tf
@@ -18,7 +18,7 @@ resource "kubernetes_job" "psql" {
         restart_policy = "Never"
 
         container {
-          image   = "postgres"
+          image   = "postgres@sha256:fe4efc6901dda0d952306fd962643d8022d7bb773ffe13fe8a21551b9276e50c"
           name    = var.app_name
           command = ["psql"]
           args = [