diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 1260308331bc088e4fddb69f69ee0459854e2620..001f91a4356bb1f433b76e22c4f6ec00c996d864 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -14,7 +14,7 @@ tags:
 # Build args passed to Dockerfile ARGs
 args:
   BASE_IMAGE: "opensource/nodejs/nodejs12"
-  BASE_TAG: "latest"
+  BASE_TAG: "12.20.1"
 
 # Docker image labels
 labels: