diff --git a/.woodpecker/build-container.yml b/.woodpecker/build-container.yml
index 2c4db92..45b42b8 100644
--- a/.woodpecker/build-container.yml
+++ b/.woodpecker/build-container.yml
@@ -6,7 +6,7 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
   - event: [push]
     branch:
-      - renovate/*
+      - renovate/auto/*
 
 steps:
   - name: dryrun
diff --git a/.woodpecker/build-package.yml b/.woodpecker/build-package.yml
index 3377d20..db8682b 100644
--- a/.woodpecker/build-package.yml
+++ b/.woodpecker/build-package.yml
@@ -6,7 +6,7 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
   - event: [push]
     branch:
-      - renovate/*
+      - renovate/auto/*
 
 steps:
   - name: build
diff --git a/.woodpecker/docs.yml b/.woodpecker/docs.yml
index ee9bf63..c698f7d 100644
--- a/.woodpecker/docs.yml
+++ b/.woodpecker/docs.yml
@@ -6,7 +6,7 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
   - event: [push]
     branch:
-      - renovate/*
+      - renovate/auto/*
 
 steps:
   - name: markdownlint
diff --git a/.woodpecker/test.yml b/.woodpecker/test.yml
index f85c8fc..8f1aa89 100644
--- a/.woodpecker/test.yml
+++ b/.woodpecker/test.yml
@@ -6,7 +6,7 @@ when:
       - ${CI_REPO_DEFAULT_BRANCH}
   - event: [push]
     branch:
-      - renovate/*
+      - renovate/auto/*
 
 steps:
   - name: lint
diff --git a/Containerfile.multiarch b/Containerfile.multiarch
index d83329b..4a0a129 100644
--- a/Containerfile.multiarch
+++ b/Containerfile.multiarch
@@ -8,7 +8,7 @@ WORKDIR /src
 
 RUN make build
 
-FROM docker.io/alpine:3.19
+FROM docker.io/alpine:3.19@sha256:51b67269f354137895d43f3b3d810bfacd3945438e94dc5ac55fdac340352f48
 
 LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"