diff --git a/default.json b/default.json
index 527af0b..d971a76 100644
--- a/default.json
+++ b/default.json
@@ -55,9 +55,16 @@
       "allowedVersions": "/alpine/i"
     },
     {
-      "description": "Replace :latest with the latest available tag and pin digest",
+      "description": "Replace :latest with semver tag + digest",
       "matchDatasources": ["docker"],
-      "matchTags": ["latest", "stable"],
+      "matchCurrentValue": "latest",
+      "versioning": "docker",
+      "pinDigests": true
+    },
+    {
+      "description": "Replace :stable with semver tag + digest",
+      "matchDatasources": ["docker"],
+      "matchCurrentValue": "stable",
       "versioning": "docker",
       "pinDigests": true
     }