diff --git a/services/keycloak/portal-e2e-client-secret-sync-cronjob.yaml b/services/keycloak/portal-e2e-client-secret-sync-cronjob.yaml
index cbe47b9..8bb7e55 100644
--- a/services/keycloak/portal-e2e-client-secret-sync-cronjob.yaml
+++ b/services/keycloak/portal-e2e-client-secret-sync-cronjob.yaml
@@ -18,7 +18,7 @@ spec:
           restartPolicy: Never
           containers:
             - name: sync
-              image: bitnami/kubectl:1.33.1
+              image: bitnami/kubectl@sha256:554ab88b1858e8424c55de37ad417b16f2a0e65d1607aa0f3fe3ce9b9f10b131
               command: ["/usr/bin/env", "bash"]
               args: ["/scripts/sso_portal_e2e_client_secret_sync.sh"]
               volumeMounts: