diff --git a/default.json b/default.json
index 303407f..1b69b4d 100644
--- a/default.json
+++ b/default.json
@@ -53,6 +53,13 @@
         ".*"
       ],
       "allowedVersions": "/alpine/i"
+    },
+    {
+      "description": "Replace :latest with the latest available tag and pin digest",
+      "matchDatasources": ["docker"],
+      "matchTags": ["latest"],
+      "versioning": "docker",
+      "pinDigests": true
     }
   ]
 }
\ No newline at end of file