diff --git a/.github/renovate.json b/.github/renovate.json
index c30902797e3..cdb4d07ae07 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -2,6 +2,7 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended",
+    "helpers:pinGitHubActionDigests",
     ":disableDependencyDashboard",
     ":automergePatch",
     ":enableVulnerabilityAlerts",