diff --git a/renovate.json b/renovate.json
index 501f0286e3..7f3d0a5202 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,6 +1,7 @@
 {
   "extends": [
-    "config:base"
+    "config:base",
+    "helpers:pinGitHubActionDigestsToSemver"
   ],
   "packageRules": [
     {