diff --git a/.github/renovate.json b/.github/renovate.json
index 2df3f9a..65e96fe 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -2,6 +2,7 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended",
-    "mergeConfidence:all-badges"
+    "mergeConfidence:all-badges",
+    "helpers:pinGitHubActionDigests"
   ]
 }