diff --git a/renovate.json b/renovate.json
index 5b12b39d99413b261c06741d60a97536d6b88cfa..17aa60b86e50fb14f5d66b621307ab037f7bcce0 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,11 +1,15 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:base",
+    "config:best-practices",
     "docker:enableMajor",
     ":prHourlyLimitNone",
     "regexManagers:dockerfileVersions",
-    ":assignAndReview(sheogorath)"
+    "replacements:all",
+    ":gomod",
+    "security:openssf-scorecard",
+    ":enableVulnerabilityAlertsWithLabel(security)",
+    ":assignee(sheogorath)"
   ],
   "prConcurrentLimit": 20,
   "semanticCommits": "enabled",