diff --git a/Dockerfile b/Dockerfile
index a0493e904a1..06507006804 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -31,7 +31,7 @@ USER nonroot
 # Runtime image
 # Ignore no User Cmd since KICS container is stopped afer scan
 # kics-scan ignore-line
-FROM cgr.dev/chainguard/busybox:latest
+FROM cgr.dev/chainguard/git@sha256:a07140c2dc120a272effc28d8d74a5b1bd568a36edaab204a3d98b72d3d5b353
 
 ENV TERM xterm-256color