diff --git a/third_party/metadata_envoy/Dockerfile b/third_party/metadata_envoy/Dockerfile
index a361980ef78..7029d161c83 100644
--- a/third_party/metadata_envoy/Dockerfile
+++ b/third_party/metadata_envoy/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM envoyproxy/envoy:latest
+FROM envoyproxy/envoy:v1.12.2
 
 RUN apt-get update -y && \
   apt-get install --no-install-recommends -y -q gettext