diff --git a/renovate.json b/renovate.json
index a17b2c5..d4af3f3 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,5 +4,9 @@
   "configMigration": true,
   "dependencyDashboardOSVVulnerabilitySummary": "all",
   "osvVulnerabilityAlerts": true,
-  "extends": [":gitSignOff",":labels(dependencies)", "docker:disable", "docker:pinDigests", "helpers:pinGitHubActionDigests", ":pinDevDependencies"]
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "labels": ["security"]
+  },
+  "extends": [":gitSignOff",":labels(dependencies)", "docker:disable", "docker:pinDigests"]
 }