diff --git a/.github/renovate.json b/.github/renovate.json
index 41f597a..d2b19bd 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -2,6 +2,7 @@
   "extends": [
     "config:best-practices"
   ],
+  "osvVulnerabilityAlerts": true,
   "vulnerabilityAlerts": {
     "labels": [
       "security"
@@ -9,6 +10,13 @@
     "automerge": true,
     "assignees": [
       "@ekristen"
+    ],
+    "packageRules": [
+      {
+        "matchManagers": ["gomod"],
+        "matchDepTypes": ["indirect"],
+        "enabled": true
+      }
     ]
   },
   "postUpdateOptions": [