diff --git a/src/agent/Cargo.lock b/src/agent/Cargo.lock
index 24eae3b5d3..858de77d2e 100644
--- a/src/agent/Cargo.lock
+++ b/src/agent/Cargo.lock
@@ -1487,7 +1487,7 @@ dependencies = [
 [[package]]
 name = "image-rs"
 version = "0.1.0"
-source = "git+https://github.com/confidential-containers/image-rs#ec5f7c53f1860e64c883828ec4c84b03d9b7d123"
+source = "git+https://github.com/confidential-containers/image-rs?rev=ec5f7c53f1860e64c883828ec4c84b03d9b7d123#ec5f7c53f1860e64c883828ec4c84b03d9b7d123"
 dependencies = [
  "anyhow",
  "flate2",
@@ -3304,7 +3304,7 @@ dependencies = [
 [[package]]
 name = "signature"
 version = "0.1.0"
-source = "git+https://github.com/confidential-containers/image-rs#ec5f7c53f1860e64c883828ec4c84b03d9b7d123"
+source = "git+https://github.com/confidential-containers/image-rs?rev=ec5f7c53f1860e64c883828ec4c84b03d9b7d123#ec5f7c53f1860e64c883828ec4c84b03d9b7d123"
 dependencies = [
  "anyhow",
  "base64",
diff --git a/src/agent/Cargo.toml b/src/agent/Cargo.toml
index 8934cad378..4cd2d6f859 100644
--- a/src/agent/Cargo.toml
+++ b/src/agent/Cargo.toml
@@ -65,7 +65,7 @@ toml = "0.5.8"
 clap = { version = "3.0.1", features = ["derive"] }
 
 # Image pull/decrypt
-image-rs = { git = "https://github.com/confidential-containers/image-rs" }
+image-rs = { git = "https://github.com/confidential-containers/image-rs", rev = "ec5f7c53f1860e64c883828ec4c84b03d9b7d123" }
 # "vendored" feature for openssl is required by musl build
 openssl = { version = "0.10.38", features = ["vendored"] }