diff --git a/default.json b/default.json
index 571029b..d212cb4 100644
--- a/default.json
+++ b/default.json
@@ -10,7 +10,8 @@
     "github>hatena/renovate-config:groupCocoaPodsPackages",
     "github>hatena/renovate-config:groupJest",
     "github>hatena/renovate-config:groupLinters",
-    "github>hatena/renovate-config:postUpdateOptions"
+    "github>hatena/renovate-config:postUpdateOptions",
+    "github>hatena/renovate-config:vulnerabilityAlerts"
   ],
   "labels": [
     "renovate"
diff --git a/vulnerabilityAlerts.json b/vulnerabilityAlerts.json
new file mode 100644
index 0000000..95e1522
--- /dev/null
+++ b/vulnerabilityAlerts.json
@@ -0,0 +1,7 @@
+{
+    "vulnerabilityAlerts": {
+        "labels": [
+            "security"
+        ]
+    }
+}