diff --git a/.woodpecker/ci.yml b/.woodpecker/ci.yml
index a7a45c8..dbbaffd 100644
--- a/.woodpecker/ci.yml
+++ b/.woodpecker/ci.yml
@@ -1,6 +1,6 @@
 steps:
   - name: renovate
-    image: renovate/renovate:full
+    image: renovate/renovate:full@sha256:5688df0716f0379577fef3d8e040794c7ec69090bd40e02fe7d392cc0f088274
     when:
       - event: cron
       - event: manual