diff --git a/renovate.json b/renovate.json
index ba84499..3a82ca5 100644
--- a/renovate.json
+++ b/renovate.json
@@ -6,5 +6,9 @@
     "enabled": true,
     "rebaseWhen": "behind-base-branch",
     "schedule": ["* 2-5 * * *"]
-  }
+  },
+  "extends": [
+    "config:recommended",
+    "helpers:pinGitHubActionDigests"
+  ]
 }