diff --git a/.github/renovate.json5 b/.github/renovate.json5
index a1903185c..1546dee1d 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -2,5 +2,12 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": ["config:base"],
   "labels": ["Dependencies"],
-  "semanticCommits": "disabled"
+  "semanticCommits": "disabled",
+  "packageRules": [
+    {
+      "groupName": "GitHub Actions",
+      "matchManagers": ["github-actions"],
+      "pinDigests": true,
+    }
+  ]
 }