diff --git a/sdk/python/kfp/compiler/_component_builder.py b/sdk/python/kfp/compiler/_component_builder.py
index fe194089d2f..1f3d1f455e6 100644
--- a/sdk/python/kfp/compiler/_component_builder.py
+++ b/sdk/python/kfp/compiler/_component_builder.py
@@ -271,7 +271,7 @@ def _generate_kaniko_spec(self, namespace, arc_dockerfile_name, gcs_path, target
                    '--dockerfile=' + arc_dockerfile_name, 
                    '--context=' + gcs_path, 
                    '--destination=' + target_image],
-          'image': 'gcr.io/kaniko-project/executor:v0.5.0',
+          'image': 'gcr.io/kaniko-project/executor@sha256:78d44ec4e9cb5545d7f85c1924695c89503ded86a59f92c7ae658afa3cff5400',
           'env': [{
             'name': 'GOOGLE_APPLICATION_CREDENTIALS',
             'value': '/secret/gcp-credentials/user-gcp-sa.json'
diff --git a/sdk/python/tests/compiler/testdata/kaniko.basic.yaml b/sdk/python/tests/compiler/testdata/kaniko.basic.yaml
index 286c15d5ffd..42e25a76e23 100644
--- a/sdk/python/tests/compiler/testdata/kaniko.basic.yaml
+++ b/sdk/python/tests/compiler/testdata/kaniko.basic.yaml
@@ -23,7 +23,7 @@ spec:
   serviceAccountName: default
   containers:
   - name: kaniko
-    image: gcr.io/kaniko-project/executor:v0.5.0
+    image: gcr.io/kaniko-project/executor@sha256:78d44ec4e9cb5545d7f85c1924695c89503ded86a59f92c7ae658afa3cff5400
     args: ["--cache=true",
                 "--dockerfile=dockerfile",
                 "--context=gs://mlpipeline/kaniko_build.tar.gz",