diff --git a/.github/renovate.json5 b/.github/renovate.json5
index cb570a53df..1d07ea63be 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -39,5 +39,9 @@
       "matchManagers": ["pre-commit"],
       "description": "Weekly update of pre-commit dependencies",
     },
-  ]
+  ],
+  "vulnerabilityAlerts": {
+    "commitMessageSuffix": "",
+    "labels": ["internal", "security"],
+  },
 }