diff --git a/apps/mcpacks/deployment.yaml b/apps/mcpacks/deployment.yaml
index fbfb416..2f9898f 100644
--- a/apps/mcpacks/deployment.yaml
+++ b/apps/mcpacks/deployment.yaml
@@ -44,7 +44,7 @@ spec:
           # The publishing workflow replaces this bootstrap tag with an
           # immutable OCI digest. Never deploy the mutable latest tag after
           # bootstrap: recording the digest makes rollbacks and audits reliable.
-          image: tea.ahmza.com/ahmza.com/mcpacks-site:latest
+          image: tea.ahmza.com/ahmza.com/mcpacks-site@sha256:3e32f335b0559290bc1e875957b4a187a8869339eca05c7eb1a4b4864a09a646
           imagePullPolicy: Always
           ports:
             - name: http