diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
index ad7653eab3..5d192dcde6 100644
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -155,9 +155,10 @@ jobs:
           cache-to: type=gha,mode=max,scope=stirling-pdf-latest
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          # Overrides the Dockerfile ARG default; 1.0.2 base drops the ffmpeg binary (CVEs).
           build-args: |
             VERSION_TAG=${{ steps.versionNumber.outputs.versionNumber }}
-            BASE_VERSION=1.0.0
+            BASE_VERSION=1.0.2
           platforms: linux/amd64,linux/arm64/v8
           provenance: true
           sbom: true