diff --git a/renovate.json b/renovate.json
index 139f0838..f59c55ba 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,7 +1,8 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:base"
+    "config:base",
+    "helpers:pinGitHubActionDigests"
   ],
   "packageRules": [
     {
@@ -10,10 +11,7 @@
       "automerge": true
     },
     {
-      "fileMatch": [
-        "^(workflow-templates|\\.github\\/workflows)\\/[^/]+\\.ya?ml$",
-        "(^|\\/)action\\.ya?ml$"
-      ],
+      "matchManagers": ["github-actions"],
       "automerge": true
     }
   ]