diff --git a/renovate.json5 b/renovate.json5
index aa84c11..ee8c941 100644
--- a/renovate.json5
+++ b/renovate.json5
@@ -1,6 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:base"],
+  "extends": ["config:base", "docker:pinDigests"],
   "nix": {
     "enabled": true
   },