diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index 37c64d168c..e80c2a2885 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:latest
+FROM ubuntu:latest@sha256:6120be6a2b7ce665d0cbddc3ce6eae60fe94637c6a66985312d1f02f63cc0bcd
 
 RUN apt-get update && apt-get install -y sudo git curl apt-transport-https ca-certificates gnupg-agent software-properties-common
 ARG USERNAME=root
diff --git a/.github/dependabot.yaml b/.github/dependabot.yml
similarity index 66%
rename from .github/dependabot.yaml
rename to .github/dependabot.yml
index dd85561c20..fbfd4e5966 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yml
@@ -10,3 +10,8 @@ updates:
     schedule:
       interval: daily
     rebase-strategy: disabled
+  - package-ecosystem: docker
+    directory: /.devcontainer
+    schedule:
+      interval: daily
+    rebase-strategy: disabled