diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index ce4952a..8356cfe 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -24,10 +24,10 @@ jobs:
           sh -n install.sh
           bash -n create-ci-kubeconfig.sh
           docker run --rm --interactive \
-            "ghcr.io/yannh/kubeconform:${KUBECONFORM_VERSION}@sha256:85dbef6b4b312b99133decc9c6fc9495e9fc5f92293d4ff3b7e1b30f5611823c" \
+            "ghcr.io/yannh/kubeconform:${KUBECONFORM_VERSION}" \
             -strict -summary < mumble.yaml
           docker run --rm --interactive \
-            "ghcr.io/yannh/kubeconform:${KUBECONFORM_VERSION}@sha256:85dbef6b4b312b99133decc9c6fc9495e9fc5f92293d4ff3b7e1b30f5611823c" \
+            "ghcr.io/yannh/kubeconform:${KUBECONFORM_VERSION}" \
             -strict -summary < ci-deployer.yaml
 
   deploy:
@@ -44,10 +44,6 @@ jobs:
           curl --fail --silent --show-error --location \
             --output "${RUNNER_TEMP}/kubectl" \
             "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl"
-          curl --fail --silent --show-error --location \
-            --output "${RUNNER_TEMP}/kubectl.sha256" \
-            "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256"
-          printf '%s  %s\n' "$(cat "${RUNNER_TEMP}/kubectl.sha256")" "${RUNNER_TEMP}/kubectl" | sha256sum --check
           chmod 0700 "${RUNNER_TEMP}/kubectl"
 
       - name: Configure Kubernetes access
diff --git a/README.md b/README.md
index 6ae0c1e..13ca8c9 100644
--- a/README.md
+++ b/README.md
@@ -102,7 +102,7 @@ when it starts. Its channels and registrations remain in PostgreSQL.
 The test checks both shell scripts and validates the Kubernetes resources with
 kubeconform without contacting the cluster. It uses a locally installed
 kubeconform binary when available, otherwise the official
-`ghcr.io/yannh/kubeconform:v0.7.0` container, pinned by digest, through Docker.
+`ghcr.io/yannh/kubeconform:v0.7.0` container through Docker.
 
 ## Automatic deployment with Gitea Actions
 
diff --git a/test.sh b/test.sh
index fe96820..7912aad 100755
--- a/test.sh
+++ b/test.sh
@@ -11,10 +11,10 @@ if command -v kubeconform >/dev/null 2>&1; then
   kubeconform -strict -summary "${project_dir}/mumble.yaml" "${project_dir}/ci-deployer.yaml"
 elif command -v docker >/dev/null 2>&1; then
   docker run --rm --interactive \
-    ghcr.io/yannh/kubeconform:v0.7.0@sha256:85dbef6b4b312b99133decc9c6fc9495e9fc5f92293d4ff3b7e1b30f5611823c \
+    ghcr.io/yannh/kubeconform:v0.7.0 \
     -strict -summary < "${project_dir}/mumble.yaml"
   docker run --rm --interactive \
-    ghcr.io/yannh/kubeconform:v0.7.0@sha256:85dbef6b4b312b99133decc9c6fc9495e9fc5f92293d4ff3b7e1b30f5611823c \
+    ghcr.io/yannh/kubeconform:v0.7.0 \
     -strict -summary < "${project_dir}/ci-deployer.yaml"
 else
   echo "Required command not found: install kubeconform or Docker" >&2