diff --git a/default.json b/default.json
index 9027b12..53dca33 100644
--- a/default.json
+++ b/default.json
@@ -3,6 +3,7 @@
   "automergeType": "pr",
   "description": "App-specific config for RightCapital repositories",
   "extends": ["config:recommended", ":pinAllExceptPeerDependencies"],
+  "pinDigests": true,
   "labels": ["renovate"],
   "npm": {
     "commitMessageTopic": "{{prettyDepType}} {{depName}}"
diff --git a/library.json b/library.json
index 27bb6cb..1278cce 100644
--- a/library.json
+++ b/library.json
@@ -3,6 +3,7 @@
   "automergeType": "pr",
   "description": "Library-specific config for RightCapital repositories",
   "extends": ["config:recommended", ":pinAllExceptPeerDependencies"],
+  "pinDigests": true,
   "labels": ["renovate"],
   "npm": { "commitMessageTopic": "{{prettyDepType}} {{depName}}" },
   "packageRules": [