diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 4f1ba82e..817f837e 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -1,5 +1,5 @@
 {
-  extends: ["config:recommended", ":enablePreCommit"],
+  extends: ["config:recommended", ":enablePreCommit", "helpers:pinGitHubActionDigests"],
   labels: ["deps"],
   minimumReleaseAge: "5 days",
   lockFileMaintenance: {