diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index ce01ceb9..0521a5e5 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -10,7 +10,7 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v2
       with:
-        go-version: 1.19
+        go-version: 1.19.8
       id: go
 
     - name: Check out the code
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index e2f2a64d..a81a7b9f 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -18,7 +18,7 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v2
       with:
-        go-version: 1.19
+        go-version: 1.19.8
       id: go
 
     - name: Check out code into the Go module directory
diff --git a/Dockerfile b/Dockerfile
index 7b67a83b..412d49fb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,7 +11,7 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-FROM busybox:1.36.0-uclibc AS busybox
+FROM busybox@sha256:91540637a8c1bd8374832a77bb11ec286c9599ff8b528d69794f5dea6e257fd9 AS busybox
 
 FROM scratch
 ADD velero-plugin-for-csi /plugins/
diff --git a/Makefile b/Makefile
index 671bba79..6812f07f 100644
--- a/Makefile
+++ b/Makefile
@@ -15,7 +15,7 @@
 # The binary to build (just the basename).
 BIN ?= velero-plugin-for-csi
 
-BUILD_IMAGE ?= golang:1.19-bullseye
+BUILD_IMAGE ?= golang:1.19.8-bullseye
 
 REGISTRY ?= velero
 IMAGE_NAME ?= $(REGISTRY)/velero-plugin-for-csi