diff --git a/lib/datasource/docker/index.js b/lib/datasource/docker/index.js
index f65d9840eac3e503937ba4321946787d360a08b7..7b9a2a44f10a405d1ad63970a1fa71f057509117 100644
--- a/lib/datasource/docker/index.js
+++ b/lib/datasource/docker/index.js
@@ -382,6 +382,11 @@ async function getLabels(registry, repository, tag) {
     const manifest = JSON.parse(manifestResponse.body);
     let labels = {};
     const configDigest = manifest.config.digest;
+    // istanbul ignore if
+    if (!manifest.config) {
+      logger.warn({ manifest }, 'Docker manifest error: no config');
+      throw new Error('registry-failure');
+    }
     const headers = await getAuthHeaders(registry, repository);
     if (!headers) {
       logger.info('No docker auth found - returning');