diff --git a/default.json b/default.json
index c0912b7..41429d5 100644
--- a/default.json
+++ b/default.json
@@ -1,7 +1,12 @@
 {
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "automergeType": "pr",
   "description": "App-specific config for RightCapital repositories",
-  "extends": ["config:recommended", ":pinAllExceptPeerDependencies"],
+  "extends": [
+    "config:recommended",
+    ":pinAllExceptPeerDependencies",
+    "docker:pinDigests"
+  ],
   "labels": ["renovate"],
   "npm": {
     "commitMessageTopic": "{{prettyDepType}} {{depName}}"
diff --git a/library.json b/library.json
index a199bcc..13153e7 100644
--- a/library.json
+++ b/library.json
@@ -1,7 +1,12 @@
 {
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "automergeType": "pr",
   "description": "Library-specific config for RightCapital repositories",
-  "extends": ["config:recommended", ":pinAllExceptPeerDependencies"],
+  "extends": [
+    "config:recommended",
+    ":pinAllExceptPeerDependencies",
+    "docker:pinDigests"
+  ],
   "labels": ["renovate"],
   "npm": { "commitMessageTopic": "{{prettyDepType}} {{depName}}" },
   "packageRules": [