diff --git a/renovate.json b/renovate.json
index f03b9b8054..4ad45928aa 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,7 +4,8 @@
     "group:commitlintMonorepo",
     "group:docusaurusMonorepo",
     ":prHourlyLimit2",
-    "workarounds:all"
+    "workarounds:all",
+    "helpers:pinGitHubActionDigests"
   ],
   "timezone": "UTC",
   "rangeStrategy": "bump",