diff --git a/.github/renovate.json b/.github/renovate.json
index cf829d84..9bee61a2 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -1,7 +1,8 @@
 {
   "extends": [
     "github>rancher/renovate-config#release",
-    "group:allNonMajor"
+    "group:allNonMajor",
+    "helpers:pinGitHubActionDigests"
   ],
   "baseBranches": [
     "main",
@@ -10,6 +11,12 @@
     "release/v1.x",
     "release/v0.x"
   ],
+  "enabledManagers": [
+    "dockerfile",
+    "github-actions",
+    "helm-values",
+    "regex"
+  ],
   "packageRules": [
     {
       "groupName": "GitHub Workflow Actions",