diff --git a/deploy/Dockerfile_debug b/deploy/Dockerfile_debug
index 04466ba30..e3dc97c96 100644
--- a/deploy/Dockerfile_debug
+++ b/deploy/Dockerfile_debug
@@ -35,7 +35,8 @@ RUN GOARCH=$(cat /goarch) && CGO_ENABLED=0 && \
   cd /go/src/github.com/GoogleCloudPlatform                                  && \
   git clone https://github.com/GoogleCloudPlatform/docker-credential-gcr.git && \
   cd /go/src/github.com/GoogleCloudPlatform/docker-credential-gcr            && \
-  go get -u -t ./...                                                         && \
+  # pin to a specific commit
+  git checkout 4cdd60d0f2d8a69bc70933f4d7718f9c4e956ff8                      && \
   go build -ldflags "-linkmode external -extldflags -static" -i -o /usr/local/bin/docker-credential-gcr main.go
 
 # Get Amazon ECR credential helper
diff --git a/deploy/Dockerfile_warmer b/deploy/Dockerfile_warmer
index 36e350f63..0425bc212 100644
--- a/deploy/Dockerfile_warmer
+++ b/deploy/Dockerfile_warmer
@@ -32,7 +32,8 @@ RUN GOARCH=$(cat /goarch) && CGO_ENABLED=0 && \
   cd /go/src/github.com/GoogleCloudPlatform                                  && \
   git clone https://github.com/GoogleCloudPlatform/docker-credential-gcr.git && \
   cd /go/src/github.com/GoogleCloudPlatform/docker-credential-gcr            && \
-  go get -u -t ./...                                                         && \
+  # pin to a specific commit
+  git checkout 4cdd60d0f2d8a69bc70933f4d7718f9c4e956ff8                      && \
   go build -ldflags "-linkmode external -extldflags -static" -i -o /usr/local/bin/docker-credential-gcr main.go
 
 # Get Amazon ECR credential helper