diff --git a/Kptfile b/Kptfile
index 05b647cabf9ea04c982f67eb2405d8f64e13a96d..84cbac2577501bd3aaa1cd7638a7b6f00c3c063f 100644
--- a/Kptfile
+++ b/Kptfile
@@ -9,5 +9,5 @@ dependencies:
     git:
       repo: https://github.com/SonarSource/docker-sonarqube
       directory: /8/enterprise
-      ref: 8.9.1
+      ref: 8.9.2
     updateStrategy: resource-merge
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index 87049c2ef0d2a6cf4acef15b34a3ba790f51385e..adf2299e990c8950e16f46f8b99fca3b897f52d7 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -37,7 +37,7 @@ labels:
 
 # List of resources to make available to the offline build context
 resources:
-- url: "docker://docker.io/library/sonarqube@sha256:994d814de2a937b0f64220ee2ee06f59d80d319a3beae76d93b331a26d0026f6"
+- url: "docker://docker.io/library/sonarqube@sha256:4c04f59d607c2392c3a66ab605124e8af693fc402040b54a73cb40b80ced5c6e"
   tag: "sonarqube:8.9-enterprise"
 
 # List of project maintainers
diff --git a/renovate.json b/renovate.json
index 65a62951ca097876a07ef2d31e3304517d61c821..ba6257141c133d4dc695c9242da6416c21a518f9 100644
--- a/renovate.json
+++ b/renovate.json
@@ -5,6 +5,22 @@
   "baseBranches": [
     "development"
   ],
+  "packageRules": [
+    {
+      "datasources": ["docker"],
+      "packageNames": ["sonarqube"],
+      "major": {
+        "enabled": false
+      }
+    },
+    {
+      "datasources": ["github-tags"],
+      "packageNames": ["SonarSource/docker-sonarqube"],
+      "major": {
+        "enabled": false
+      }
+    }
+  ],
   "postUpgradeTasks": {
     "commands": [
       "kpt pkg sync ."