diff --git a/.github/workflows/continuous-delivery.yml b/.github/workflows/continuous-delivery.yml
index 88ac715..4fd243e 100644
--- a/.github/workflows/continuous-delivery.yml
+++ b/.github/workflows/continuous-delivery.yml
@@ -1,5 +1,6 @@
 name: continuous-delivery
 on:
+  pull_request:
   workflow_dispatch:
     inputs:
       cnpg_branch:
@@ -80,10 +81,11 @@ jobs:
         revision: ${{ github.sha }}
         pgMajor: ${{ env.PG_MAJOR }}
       with:
-        push: true
+        push: ${{ github.event_name != 'pull_request' }}
 
     # Get a list of the images that were built and pushed. We only care about a single tag for each image.
     - name: Generated images
+      if: github.event_name != 'pull_request'
       id: images
       env:
         BUILD_METADATA: ${{ steps.build.outputs.metadata }}
diff --git a/renovate.json b/renovate.json
index 8126192..ae38724 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,7 +1,11 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:recommended"
+    "config:recommended",
+    "docker:pinDigests",
+    ":gitSignOff",
+    ":automergeMinor",
+    ":automergeDigest"
   ],
   "prConcurrentLimit": 5,
   "semanticCommits": "enabled",