diff --git a/nginx/Dockerfile b/nginx/Dockerfile
index bb50aa6..22aa043 100644
--- a/nginx/Dockerfile
+++ b/nginx/Dockerfile
@@ -1,7 +1,7 @@
 ARG NGINX_BRANCH=vanilla
-FROM alpine:latest AS base
+FROM alpine:3.22 AS base
 
-FROM alpine:latest AS build_stage_1
+FROM base AS build_stage_1
 ARG NGINX_VERSION LIBRESSL_VERSION
 RUN --mount=type=cache,target=/var/cache/apk apk update
 RUN --mount=type=cache,target=/var/cache/apk apk add \