diff --git a/kubernetes/main/apps/security/authentik/cdn/helm-release.yaml b/kubernetes/main/apps/security/authentik/cdn/helm-release.yaml
index 3bfbbfe968..cd87b26a62 100644
--- a/kubernetes/main/apps/security/authentik/cdn/helm-release.yaml
+++ b/kubernetes/main/apps/security/authentik/cdn/helm-release.yaml
@@ -35,7 +35,7 @@ spec:
           main:
             image:
               repository: ghcr.io/szinn/s3-cdn
-              tag: 0.2.0
+              tag: 0.2.0@sha256:6f50fe5ee07cfe0859f3cc0e4af2ca599cc86dc0e1c56deaf905b1bf77effe1a
               pullPolicy: Always
             args:
               - server