diff --git a/cloudbuild.yaml b/cloudbuild.yaml
index f531a90a9..900de5b39 100644
--- a/cloudbuild.yaml
+++ b/cloudbuild.yaml
@@ -1,9 +1,10 @@
 steps:
-- name: 'gcr.io/kaniko-project/executor:latest'
+- name: 'gcr.io/kaniko-project/executor:v0.17.0'
   args:
   - --destination=gcr.io/$PROJECT_ID/$BRANCH_NAME
   - --cache=true
   - --cache-ttl=24h
+  - --whitelist-var-run=false
 
 options:
     machineType: 'N1_HIGHCPU_32'