Skip to content

Renovate

Renovate #36

Workflow file for this run

# Code generated by kickr; DO NOT EDIT.
name: Renovate
run-name: Renovate
on:
workflow_dispatch:
inputs:
dry_run:
description: Renovate run mode.
type: choice
options:
- "null"
- extract
- lookup
- full
default: "null"
schedule:
- cron: "0 12 * * *"
concurrency:
group: ${{ github.workflow }}-${{ github.ref_name }}
cancel-in-progress: true
permissions:
contents: read
jobs:
renovate:
name: Renovate
runs-on: ubuntu-latest
steps:
# https://docs.stepsecurity.io/harden-runner/workflow-runs
# https://github.com/marketplace/actions/harden-runner
- uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
with:
disable-sudo-and-containers: false # renovate needs to have access to docker sock
egress-policy: audit
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
- uses: renovatebot/github-action@6927a58a017ee9ac468a34a5b0d2a9a9bd45cac3 # v43.0.11
with:
token: ${{ secrets.RENOVATE_TOKEN }}
env:
LOG_LEVEL: ${{ vars.RENOVATE_LOG_LEVEL || 'info' }}
RENOVATE_CONFIG_FILE: .github/renovate.json
RENOVATE_DRY_RUN: ${{ inputs.dry_run }}