diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 48daf344..051079e3 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -1,5 +1,6 @@
 {
   "enabled": true,
+  "extends": ["helpers:pinGitHubActionDigests"],
   "dependencyDashboard": true,
   "dependencyDashboardTitle": "Renovate Dashboard",
   "assigneesFromCodeOwners": true,
@@ -33,6 +34,11 @@
       "commitMessageExtra": "to {{#if isSingleVersion}}v{{{newVersion}}}{{else}}{{{newValue}}}{{/if}}",
       "matchUpdateTypes": ["major", "minor", "patch", "digest"],
     },
+    // Setup datasources for github actions
+    {
+      "matchManagers": ["github-actions"],
+      "automerge": true,
+    },
     //
     // helm charts
     //