diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index b4de57a..7809210 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,4 +1,4 @@
-image: quay.io/buildah/stable:latest@sha256:dd77a048ff8c565b75edd9b0faa83bb7356170c2c423f8c64b3ad80bfb208703
+image: quay.io/buildah/stable:latest
 
 variables:
   STORAGE_DRIVER: vfs
@@ -17,6 +17,7 @@ stages:
 
 build_base:
   stage: base
+  resource_group: base
   script:
     - buildah bud --storage-driver=${STORAGE_DRIVER} -t ${FQ_IMAGE_NAME}:latest -f Dockerfile.base .
     - echo "$CI_REGISTRY_PASSWORD" | buildah login -u "$CI_REGISTRY_USER" --password-stdin "$CI_REGISTRY"
diff --git a/renovate.json b/renovate.json
index 744a797..a44a18b 100644
--- a/renovate.json
+++ b/renovate.json
@@ -2,5 +2,13 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "local>renovate/renovate-config"
+  ],
+  "packageRules": [
+    {
+      "matchPackageNames": [
+        "quay.io/buildah/stable"
+      ],
+      "enabled": false
+    }
   ]
 }
diff --git a/tools/coder-cli/.gitlab-ci.yml b/tools/coder-cli/.gitlab-ci.yml
index 2d9d0b6..f040caf 100644
--- a/tools/coder-cli/.gitlab-ci.yml
+++ b/tools/coder-cli/.gitlab-ci.yml
@@ -1,5 +1,6 @@
 build_cli:
   stage: base
+  resource_group: cli
   script:
     - buildah info
     - buildah bud --storage-driver=${STORAGE_DRIVER} -t ${FQ_IMAGE_NAME}:cli -f tools/coder-cli/Dockerfile .
diff --git a/tools/terraform-shell/.gitlab-ci.yml b/tools/terraform-shell/.gitlab-ci.yml
index e9aa7f1..01c5c59 100644
--- a/tools/terraform-shell/.gitlab-ci.yml
+++ b/tools/terraform-shell/.gitlab-ci.yml
@@ -1,5 +1,6 @@
 build_shell:
   stage: base
+  resource_group: terraform
   script:
     - buildah info
     - buildah bud --storage-driver=${STORAGE_DRIVER} -t ${FQ_IMAGE_NAME}:terraform -f tools/terraform-shell/Dockerfile .