diff --git a/renovate.json b/renovate.json
index 0a28dc383..4159f87af 100644
--- a/renovate.json
+++ b/renovate.json
@@ -26,7 +26,7 @@
         "(^|/)templates/.*\\.yaml$"
       ],
       "matchStrings": [
-        "#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)(?:\\s+versioning=(?<versioning>[^\\s]+))?\\s*[a-zA-Z0-9_-]+:\\s*[\"']?(?<currentValue>[^\"'\\s]+)[\"']?"
+        "#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)(?:\\s+versioning=(?<versioning>[^\\s]+))?\\s*[a-zA-Z0-9_-]+:\\s*[\"']?(?<currentValue>[^\"'\\s]+(?:@sha256:[a-f0-9]+)?)[\"']?"
       ],
       "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver-coerced{{/if}}"
     },