diff --git a/.gitmodules b/.gitmodules
index 28f984d..ed8a3a6 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,3 +1,4 @@
 [submodule "gardenlinux"]
 	path = gardenlinux
 	url = https://github.com/gardenlinux/gardenlinux
+	branch = rel-1877
diff --git a/renovate.json b/renovate.json
index 1ba6e4a..9074fd0 100644
--- a/renovate.json
+++ b/renovate.json
@@ -39,6 +39,25 @@
       "extractVersionTemplate": "^(?<version>.+)\\+bp1877$",
       "versioningTemplate": "loose",
       "autoReplaceStringTemplate": "EDK2_VERSION=\"{{{newValue}}}%2Bbp1877\""
+    },
+    {
+      "customType": "regex",
+      "managerFilePatterns": ["/^\\.github/workflows/.+\\.ya?ml$/"],
+      "matchStrings": [
+        "uses:\\s*gardenlinux/gardenlinux/\\.github/workflows/[^@\\s]+@(?<currentDigest>[a-f0-9]{40})"
+      ],
+      "depNameTemplate": "gardenlinux/gardenlinux",
+      "packageNameTemplate": "https://github.com/gardenlinux/gardenlinux",
+      "datasourceTemplate": "git-refs",
+      "currentValueTemplate": "rel-1877"
+    }
+  ],
+  "packageRules": [
+    {
+      "matchDatasources": ["git-refs"],
+      "matchDepNames": ["gardenlinux/gardenlinux", "gardenlinux"],
+      "versioning": "loose",
+      "allowedVersions": "/^rel-1877$/"
     }
   ]
 }