diff --git a/renovate.json b/renovate.json
index 8d2bde9445..10b8fd1f50 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,5 +1,5 @@
 {
-  "extends": ["config:recommended"],
+  "extends": ["config:recommended", "helpers:pinGitHubActionDigests"],
   "packageRules": [
     {
       "enabled": false,