diff --git a/Dockerfile b/Dockerfile
index 1a05a563..db8a3207 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -7,11 +7,12 @@ WORKDIR /src
 ADD https://github.com/CosmWasm/wasmvm/releases/download/v2.1.2/libwasmvm_muslc.aarch64.a /lib/libwasmvm_muslc.aarch64.a
 ADD https://github.com/CosmWasm/wasmvm/releases/download/v2.1.2/libwasmvm_muslc.x86_64.a /lib/libwasmvm_muslc.x86_64.a
 
-# hadolint ignore=DL4006
-RUN set -eux \
-    && apk add --no-cache ca-certificates=20240705-r0 build-base=0.5-r3 git=~2.45 linux-headers=6.6-r0 \
-    && sha256sum /lib/libwasmvm_muslc.aarch64.a | grep 0881c5b463e89e229b06370e9e2961aec0a5c636772d5142c68d351564464a66 \
-    && sha256sum /lib/libwasmvm_muslc.x86_64.a | grep 58e1f6bfa89ee390cb9abc69a5bc126029a497fe09dd399f38a82d0d86fe95ef
+SHELL ["/bin/ash", "-o", "pipefail", "-c"]
+# hadolint ignore=DL3018
+RUN \
+    apk add --no-cache ca-certificates build-base=0.5-r3 git=~2.45 linux-headers=6.6-r0 \
+ && sha256sum /lib/libwasmvm_muslc.aarch64.a | grep 0881c5b463e89e229b06370e9e2961aec0a5c636772d5142c68d351564464a66 \
+ && sha256sum /lib/libwasmvm_muslc.x86_64.a | grep 58e1f6bfa89ee390cb9abc69a5bc126029a497fe09dd399f38a82d0d86fe95ef
 
 COPY . /src/