diff --git a/docker-compose.yml b/docker-compose.yml
index 5b8f251..902d2bb 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -8,7 +8,7 @@ services:
       replicas: 1
       restart_policy:
         condition: any
-    image: drone/drone:1.7.0
+    image: drone/drone:1.9.0
     volumes:
       - drone:/var/lib/drone
       - drone-data:/data
@@ -39,7 +39,7 @@ services:
       replicas: 1
       restart_policy:
         condition: any
-    image: drone/drone-runner-docker:1
+    image: drone/drone-runner-docker:1.4.0
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     environment:
diff --git a/drone-starlark/repos/clear.star b/drone-starlark/repos/clear.star
index f40bdab..779c03b 100644
--- a/drone-starlark/repos/clear.star
+++ b/drone-starlark/repos/clear.star
@@ -3,7 +3,7 @@ load("@this//:from-secret.star", "fromSecret")
 def clear(folder):   
   return {
     "name": "clear",
-    "image": "appleboy/drone-ssh",
+    "image": "appleboy/drone-ssh:1.6.2",
     "settings": {
       "host": fromSecret("ssh-host"),
       "port": fromSecret("ssh-port"),
diff --git a/drone-starlark/repos/deploy-from-registry.star b/drone-starlark/repos/deploy-from-registry.star
index 9e59892..ae89204 100644
--- a/drone-starlark/repos/deploy-from-registry.star
+++ b/drone-starlark/repos/deploy-from-registry.star
@@ -13,7 +13,7 @@ def deploy(
 ):
   return {
     "name": "deploy {name}".format(name = name),
-    "image": "appleboy/drone-ssh",
+    "image": "appleboy/drone-ssh:1.6.2",
     "environment": environment(secrets),
     "settings": {
       "envs": [x.replace("-", "_") for x in secrets ],
diff --git a/drone-starlark/repos/deploy.star b/drone-starlark/repos/deploy.star
index 0f9dda1..06c4db9 100644
--- a/drone-starlark/repos/deploy.star
+++ b/drone-starlark/repos/deploy.star
@@ -13,7 +13,7 @@ def deploy(
 ):
   return {
     "name": "deploy {name}".format(name = name),
-    "image": "appleboy/drone-ssh",
+    "image": "appleboy/drone-ssh:1.6.2",
     "environment": environment(secrets),
     "settings": {
       "envs": [x.replace("-", "_") for x in secrets ],
diff --git a/drone-starlark/repos/print-secrets.star b/drone-starlark/repos/print-secrets.star
index f777a14..6dcadbe 100644
--- a/drone-starlark/repos/print-secrets.star
+++ b/drone-starlark/repos/print-secrets.star
@@ -8,7 +8,7 @@ load("@this//:echo-secret.star", "echoSecret")
 def printSecrets(filename, env, secretEnv):   
   return {
     "name": "print secrets",
-    "image": "appleboy/drone-ssh",
+    "image": "appleboy/drone-ssh:1.6.2",
     "environment": environment(env + secretEnv),
     "settings": {
       "envs": [x.replace("-", "_") for x in env + secretEnv ],
diff --git a/drone-starlark/repos/pull.star b/drone-starlark/repos/pull.star
index c24c577..434f309 100644
--- a/drone-starlark/repos/pull.star
+++ b/drone-starlark/repos/pull.star
@@ -13,7 +13,7 @@ def pull(
   ]
   return {
     "name": name,
-    "image": "appleboy/drone-ssh",
+    "image": "appleboy/drone-ssh:1.6.2",
     "environment": environment(secrets),
     "settings": {
       "envs": [x.replace("-", "_") for x in secrets ],
diff --git a/drone-starlark/repos/rescale.star b/drone-starlark/repos/rescale.star
index 53a1a17..bc86a54 100644
--- a/drone-starlark/repos/rescale.star
+++ b/drone-starlark/repos/rescale.star
@@ -6,7 +6,7 @@ def rescale(
 ):
   return {
     "name": "rescale {service}".format(service=service),
-    "image": "appleboy/drone-ssh",
+    "image": "appleboy/drone-ssh:1.6.2",
     "settings": {
       "host": fromSecret("ssh-host"),
       "port": fromSecret("ssh-port"),
diff --git a/drone-starlark/repos/scp.star b/drone-starlark/repos/scp.star
index f0b4c6f..d8de3e6 100644
--- a/drone-starlark/repos/scp.star
+++ b/drone-starlark/repos/scp.star
@@ -1,7 +1,7 @@
 def scp(target):
   return {
     "name": "scp files",
-    "image": "appleboy/drone-scp",
+    "image": "appleboy/drone-scp:1.6.2",
     "settings": {
       "host": {
         "from_secret": "ssh-host",