diff --git a/renovate.json b/renovate.json
index 6565e8a..52f9b56 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,6 +4,7 @@
     "config:recommended",
     ":rebaseStalePrs",
     ":semanticCommits",
-    ":semanticCommitType(build)"
+    ":semanticCommitType(build)",
+    "helpers:pinGitHubActionDigestsToSemver"
   ]
 }