diff --git a/.goreleaser.yml b/.goreleaser.yml
index 9633533..4a866c2 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -11,10 +11,13 @@ builds:
   id: publiccode-parser
   binary: publiccode-parser
   main: ./publiccode-parser/publiccode_parser.go
+  flags:
+    - -trimpath
   ldflags:
-    - -s -w -X main.version={{.Version}} -X main.date={{.Date}}
+    - -s -w -buildid= -X main.version={{.Version}} -X main.date={{.CommitDate}}
   env:
     - CGO_ENABLED=0
+    - SOURCE_DATE_EPOCH={{.CommitTimestamp}}
   goos:
     - linux
     - darwin
diff --git a/Dockerfile.goreleaser b/Dockerfile.goreleaser
index a4850c5..51a43c7 100644
--- a/Dockerfile.goreleaser
+++ b/Dockerfile.goreleaser
@@ -2,7 +2,7 @@
 # This is the Docker image that gets published to DockerHub.
 # Goreleaser takes care of building the binary.
 #
-FROM alpine:3
+FROM alpine:3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11
 
 COPY publiccode-parser /usr/local/bin/publiccode-parser