diff --git a/default.json b/default.json
index 913c585..7089e1a 100644
--- a/default.json
+++ b/default.json
@@ -7,7 +7,8 @@
     "preview:buildkite",
     "preview:dockerCompose",
     "docker:disableMajor",
-    "group:monorepos"
+    "group:monorepos",
+    "docker:pinDigests"
   ],
   "lockFileMaintenance": {
     "enabled": true
@@ -261,6 +262,17 @@
 
       "prPriority": 99,
       "schedule": "before 3:00 am every weekday"
+    },
+    {
+      "matchUpdateTypes": ["digest"],
+      "matchManagers": ["dockerfile"],
+      "automerge": true
+    },
+    {
+      "matchUpdateTypes": ["digest"],
+      "matchManagers": ["dockerfile"],
+      "schedule": ["before 7:00 on Monday"],
+      "prPriority": 99
     }
   ],
   "branchConcurrentLimit": null,
diff --git a/non-critical.json b/non-critical.json
index bdb0db7..7afd76b 100644
--- a/non-critical.json
+++ b/non-critical.json
@@ -8,7 +8,8 @@
     ":timezone(Australia/Melbourne)",
     "preview:buildkite",
     "preview:dockerCompose",
-    "docker:disableMajor"
+    "docker:disableMajor",
+    "docker:pinDigests"
   ],
   "lockFileMaintenance": { "enabled": true },
   "packageRules": [
diff --git a/third-party-major.json b/third-party-major.json
index 928f260..ad0478c 100644
--- a/third-party-major.json
+++ b/third-party-major.json
@@ -9,7 +9,8 @@
     ":updateNotScheduled",
     "preview:buildkite",
     "preview:dockerCompose",
-    "docker:disableMajor"
+    "docker:disableMajor",
+    "docker:pinDigests"
   ],
   "lockFileMaintenance": {
     "enabled": true
@@ -128,6 +129,17 @@
 
       "prPriority": 99,
       "schedule": "before 3:00 am every weekday"
+    },
+    {
+      "matchUpdateTypes": ["digest"],
+      "matchManagers": ["dockerfile"],
+      "automerge": true
+    },
+    {
+      "matchUpdateTypes": ["digest"],
+      "matchManagers": ["dockerfile"],
+      "schedule": ["before 7:00 on Monday"],
+      "prPriority": 99
     }
   ],
   "commitMessageAction": "",