diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index dfa69186e24960d0ab4218d9b2d1527a3c932d77..70d22d9f47b56e165545a34ea284113f9ed312a4 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -37,7 +37,7 @@ labels:
 
 # List of resources to make available to the offline build context
 resources:
-- url: "docker://docker.io/library/sonarqube@sha256:6a151f3584c78430ec34b2d9ade3b7a50742a02a09fd9366360b07b9f2518379"
+- url: "docker://docker.io/library/sonarqube@sha256:4de9a8a7edf2d05daec5d3203f50e2a4aa92712a2d0c9da534bcefba2cd313e9"
   tag: "sonarqube:8.9-developer"
 
 # List of project maintainers
diff --git a/renovate.json b/renovate.json
index 1ff40b9a1f54bc44cfb1969f11ed837aae5a16b4..4d4286662489fa471094902d7c86ed88a7b64c0d 100644
--- a/renovate.json
+++ b/renovate.json
@@ -5,6 +5,22 @@
   "baseBranches": [
     "development"
   ],
+  "packageRules": [
+    {
+      "datasources": ["docker"],
+      "packageNames": ["sonarqube"],
+      "major": {
+        "enabled": false
+      }
+    },
+    {
+      "datasources": ["github-tags"],
+      "packageNames": ["SonarSource/docker-sonarqube"],
+      "major": {
+        "enabled": false
+      }
+    }
+  ],
   "postUpgradeTasks": {
     "commands": [
       "kpt pkg sync ."
@@ -70,4 +86,4 @@
       "versioningTemplate": "docker"
     }
   ]
-}
\ No newline at end of file
+}