diff --git a/renovate.json b/renovate.json
index f36c3c75832..206526bd392 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,5 +1,8 @@
 {
-  "extends": ["github>freecodecamp/renovate-config"],
+  "extends": [
+    "github>freecodecamp/renovate-config",
+    "helpers:pinGitHubActionDigests"
+  ],
   "packageRules": [
     {
       "groupName": "Monaco Editor",