diff --git a/Dockerfile b/Dockerfile
index 7b3200a..c3a502a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,14 +14,17 @@
 # Manifests:
 #    <other stuff to ignore>
 # And use this digest in FROM
-FROM golang:1.22.1@sha256:0b55ab82ac2a54a6f8f85ec8b943b9e470c39e32c109b766bbc1b801f3fa8d3b as builder
+
+ARG base_sha=0b55ab82ac2a54a6f8f85ec8b943b9e470c39e32c109b766bbc1b801f3fa8d3b
+
+FROM golang:1.22.1@sha256:${base_sha} as builder
 
 COPY . /sources
 WORKDIR /sources
 RUN go build -o scip-go ./cmd/scip-go
 
 # Keep in sync with builder image
-FROM golang:1.22.1@sha256:0b55ab82ac2a54a6f8f85ec8b943b9e470c39e32c109b766bbc1b801f3fa8d3b as final
+FROM golang:1.22.1@sha256:${base_sha} as final
 
 COPY --from=builder /sources/scip-go /usr/bin/
 CMD ["scip-go"]