diff --git a/renovate.json b/renovate.json
index 1ccccb00aba44..b545f93ad0377 100644
--- a/renovate.json
+++ b/renovate.json
@@ -3,6 +3,7 @@
   "extends": [
     "config:recommended",
     "docker:disable",
+    "helpers:pinGitHubActionDigests",
     ":semanticCommitScopeDisabled",
     ":semanticCommitTypeAll(deps)"
   ],