diff --git a/Dockerfile b/Dockerfile
index ac75fa8..8b70edd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/ubi:latest
+FROM registry.access.redhat.com/ubi9/ubi:latest@sha256:38791b293262ac2169eca2717e68e626a047d2b89fbd1da544db24ed0204efeb
 
 ARG SYNC2JIRA_GIT_REPO=https://github.com/release-engineering/Sync2Jira.git
 ARG SYNC2JIRA_GIT_REF=master
diff --git a/Dockerfile.sync-page b/Dockerfile.sync-page
index d7867ce..2e9c403 100644
--- a/Dockerfile.sync-page
+++ b/Dockerfile.sync-page
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/ubi:latest
+FROM registry.access.redhat.com/ubi9/ubi:latest@sha256:38791b293262ac2169eca2717e68e626a047d2b89fbd1da544db24ed0204efeb
 
 ARG SYNC2JIRA_GIT_REPO=https://github.com/release-engineering/Sync2Jira.git
 ARG SYNC2JIRA_GIT_REF=master
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..cb83a4a
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,7 @@
+{
+  "automerge": true,
+  "updateNotScheduled": false,
+  "schedule": [
+    "after 5pm on sunday"
+  ]
+}