diff --git a/.github/renovate.json5 b/.github/renovate.json5
index cf9d0bc9..d880c30b 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -1,4 +1,5 @@
 {
+  extends: ["helpers:pinGitHubActionDigests"],
   schedule: [
     'before 5am on the first day of the month',
   ],