diff --git a/renovate.json b/renovate.json
index 7389fd3eb70058294335c7a5b9b1665e4d03a78d..6dcf9f161db9bc7814c11a458013f997f2cd69e0 100644
--- a/renovate.json
+++ b/renovate.json
@@ -57,6 +57,10 @@
         "rook-ceph-cluster"
       ],
       "groupName": "rook-ceph"
+    },
+    {
+      "matchPaths": ["images/kos/**"],
+      "extends": ["docker:pinDigests"]
     }
   ]
 }