diff --git a/default.json b/default.json
index 8c311d6..21616e3 100644
--- a/default.json
+++ b/default.json
@@ -9,6 +9,7 @@
     ":preserveSemverRanges",
     ":semanticCommits",
     ":timezone(Europe/Helsinki)",
+    "helpers:pinGitHubActionDigests",
     "docker:enableMajor",
     "group:recommended",
     "npm:unpublishSafe",