diff --git a/renovate.json b/renovate.json
index 08f49571b8c6da7ae955c2b1c94632aa014f4301..d3e5b9fea429b0f5fa912b6ee19070c1da1c0a10 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,6 +4,7 @@
     "config:recommended",
     ":semanticCommitsDisabled",
     ":separateMultipleMajorReleases",
+    "helpers:pinGitHubActionDigests",
     "group:serdeMonorepo"
   ],
   "dependencyDashboard": true,