diff --git a/.forgejo/workflows/renovater.yml b/.forgejo/workflows/renovater.yml
index 92a067d..b035c2e 100644
--- a/.forgejo/workflows/renovater.yml
+++ b/.forgejo/workflows/renovater.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   renovate:
     runs-on: docker
-    container: ghcr.io/renovatebot/renovate:latest
+    container: ghcr.io/renovatebot/renovate:latest@sha256:90df8f81b7e2661b9b2d2a7f355f916c65c4f38937325378f3911fe1ee8fee11
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - run: renovate