diff --git a/Dockerfile b/Dockerfile
index 796fd6d..5b2f50b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,12 +1,11 @@
-# Default Dockerfile — single-stage build, always works.
-# For faster builds with pre-built deps image, use Dockerfile.fast.
 FROM registry.access.redhat.com/ubi9/python-312:latest
-WORKDIR /opt/app-root/src
 
-COPY pyproject.toml .
-COPY sre_agent/ sre_agent/
-RUN pip install --no-cache-dir .
+WORKDIR /app
+COPY . .
 
 USER 1001
+
 EXPOSE 8080
-CMD ["pulse-agent-api"]
+
+HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
+  CMD curl -f http://localhost:8080/ || exit 1
diff --git a/Dockerfile.deps b/Dockerfile.deps
index caf993c..ee86c9d 100644
--- a/Dockerfile.deps
+++ b/Dockerfile.deps
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/python-312:latest
+FROM registry.access.redhat.com/ubi9/python-312@sha256:ebd0347a0422ad0d24db801972b4c1efa6f3352e5c2553b034e6b70e91235854
 WORKDIR /opt/app-root/src
 
 ARG DEPS_HASH=unknown