diff --git a/dockerfiles/altair/Dockerfile b/dockerfiles/altair/Dockerfile
index 9a40681..980c0fb 100644
--- a/dockerfiles/altair/Dockerfile
+++ b/dockerfiles/altair/Dockerfile
@@ -2,12 +2,12 @@
 # Format: {COMPONENT}_VERSION="x.y.z" with standardized renovate comments
 
 # renovate: datasource=docker depName=node
-ARG NODE_VERSION="22.9.0"
+ARG NODE_VERSION="22.17.1"
 # renovate: datasource=git-refs depName=altair-graphql/altair
 ARG ALTAIR_VERSION="8.1.3"
 
 # First stage: Clone the Altair repository
-FROM alpine/git AS repo
+FROM alpine/git@sha256:18b834b04cd81f222440637a2fdf5d190a6e420cae2199199f691e902dace863 AS repo
 WORKDIR /altair
 ARG ALTAIR_VERSION
 RUN git clone --depth 1 --branch v${ALTAIR_VERSION} https://github.com/altair-graphql/altair.git .