diff --git a/Dockerfile b/Dockerfile
index 2682ad9..6ecc09a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -20,9 +20,14 @@ FROM debian:bookworm-slim AS final
 RUN apt update && \
      apt-get install -y curl netcat-traditional libmicrohttpd12 libjansson4 libsodium23
 
+ENV yq_sha256_amd64=a2c097180dd884a8d50c956ee16a9cec070f30a7947cf4ebf87d5f36213e9ed7
+ENV yq_sha256_arm64=0e7e1524f68d91b3ff9b089872d185940ab0fa020a5a9052046ef10547023156
+
 ARG ARCH
 ARG PLATFORM
-RUN curl -sLo /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.44.3/yq_linux_${PLATFORM} && chmod +x /usr/local/bin/yq
+RUN curl -sLo /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.44.3/yq_linux_${PLATFORM}
+RUN eval echo "\${yq_sha256_${PLATFORM}} */usr/local/bin/yq" | sha256sum -c
+RUN chmod +x /usr/local/bin/yq
 
 WORKDIR /root