diff --git a/.github/workflows/osx.yml b/.github/workflows/osx.yml
index 89ce49d535..d69b4a2c05 100644
--- a/.github/workflows/osx.yml
+++ b/.github/workflows/osx.yml
@@ -22,7 +22,7 @@ jobs:
   check-pr-labels:
     runs-on: [ubuntu-latest]
     steps:
-      - uses: docker://agilepathway/pull-request-label-checker:latest
+      - uses: docker://agilepathway/pull-request-label-checker@sha256:ee57b0e1aedab22063ce6467a6e6358e254a9204693ca20d8a16b2d891db8d5f  # v1.6.32
         with:
           none_of: 'AT: WIP'
           repo_token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/scripts/docker/Dockerfile.hip b/scripts/docker/Dockerfile.hip
index ab3edd7503..83d2c99f53 100644
--- a/scripts/docker/Dockerfile.hip
+++ b/scripts/docker/Dockerfile.hip
@@ -1,5 +1,4 @@
-ARG BASE=rocm/dev-ubuntu-20.04@sha256:f345894ae2d64c0d4676070301b0368599c504462bcb5934aa40f65357078c85 # 5.2
-FROM $BASE
+FROM rocm/dev-ubuntu-20.04@sha256:f345894ae2d64c0d4676070301b0368599c504462bcb5934aa40f65357078c85 AS BASE # rocm/dev-ubuntu-20.04:5.2
 
 RUN apt-get update && apt-get install -y \
         git \
diff --git a/scripts/docker/Dockerfile.sycl b/scripts/docker/Dockerfile.sycl
index 4dbd69dcba..62f91404cd 100644
--- a/scripts/docker/Dockerfile.sycl
+++ b/scripts/docker/Dockerfile.sycl
@@ -1,5 +1,4 @@
-ARG BASE=nvidia/cuda@sha256:38e59267704b5d91ef63c7d8f613359c629fab0aead1283d59ca7821029e73bc # 11.7.1-devel-ubuntu22.04
-FROM $BASE
+FROM nvidia/cuda@sha256:38e59267704b5d91ef63c7d8f613359c629fab0aead1283d59ca7821029e73bc AS BASE # nvidia/cuda:11.7.1-devel-ubuntu22.04
 
 RUN apt-key adv --fetch-keys https://developer.download.nvidia.com/compute/cuda/repos/ubuntu1804/x86_64/3bf863cc.pub