diff --git a/default.json b/default.json
index a4c043c..2c3933e 100644
--- a/default.json
+++ b/default.json
@@ -3,6 +3,7 @@
   "prHourlyLimit": 0,
   "prConcurrentLimit": 0,
   "extends": [
+    "docker:pinDigests",
     "group:monorepos",
     "group:recommended",
     "workarounds:typesNodeVersioning"