diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 4bd29360752..997836fd2f1 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -1,5 +1,6 @@
 {
   "enabled": true,
+  "extends": ["helpers:pinGitHubActionDigests"]
   "dependencyDashboard": true,
   "dependencyDashboardTitle": "Renovate Dashboard",
   "assigneesFromCodeOwners": true,