diff --git a/.github/renovate.json b/.github/renovate.json
index aa673503..fefbcd40 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -1,7 +1,8 @@
 {
   "extends": [
     "config:base",
-    ":dependencyDashboard"
+    ":dependencyDashboard",
+    "helpers:pinGitHubActionDigests",
   ],
   "packageRules": [
     {