diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 1fcef04..6615d50 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -22,3 +22,13 @@ updates:
         update-types:
           - "minor"
           - "patch"
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: weekly
+    groups:
+      docker:
+        update-types:
+          - "patch"
+          - "minor"
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e6399a3..d2c8c40 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -51,7 +51,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-go-
 
-      - uses: chainguard-dev/actions/goimports@main
+      - uses: chainguard-dev/actions/goimports@5363dd9eb48083bbf7674a4bbe62d71c3b230edd # v1.1.2
 
       - name: Login to registry
         if: github.repository == 'helm/chart-releaser'