open-turo/GitHub Action Renovatebot

GitHub Action that runs renovatebot with a very opinionated runner configuration. It supports configuring it to talk to private registries for Artifactory, Docker, NPM and Terraform.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jul 9, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: open-turo/action-renovate@eec490c31db70cc7c8be9191b61bbaad80a5f5b3 # v1.6.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
dry-runWhether to run the action in dry-run modeno
checkout-repoPerform checkout as first step of actionnotrue
artifactory-usernameUsername to authenticate against a maven artifactoryno
artifactory-passwordPassword to authenticate against a maven artifactoryno
artifactory-username-property-nameName of the gradle property to use for the artifactory usernamenoartifactoryUsername
artifactory-password-property-nameName of the gradle property to use for the artifactory passwordnoartifactoryAuthToken
artifactory-match-hostA domain name, host name or base URL to match maven artifactory libraries with (see https://docs.renovatebot.com/configuration-options/#matchhost)no
artifactory-registry-urlsA comma separate list of extra registry URLs to tell renovate to use to find new versions of packages (e.g a jfrog registry)no
artifactory-package-prefixesPackage prefix to tell renovate to look for dependencies in the artifactory-registry-urls (e.g com.openTuro)no
env-regexOverride the environment variables which will be passsed into the renovate container. Defaults to `^(?:RENOVATE_\\w+|LOG_LEVEL|GITHUB_COM_TOKEN|NODE_OPTIONS|(?:HTTPS?|NO)_PROXY|(?:https?|no)_proxy)$`no
extra-configExtra configuration to pass to renovate. It has to be a valid JSON object. Use with caution as this could override the default configuration created by this actionno{}
docker-usernameUsername to authenticate against docker hubno
docker-passwordPassword to authenticate against docker hubno
docker-volumesDocker volume mounts. Default to /tmp:/tmp no/tmp:/tmp
github-tokenGitHub token that can checkout the repository as well as create tags/releases against it. e.g. 'secrets.GITHUB_TOKEN'yes${{ github.token }}
git-ignored-authorsAdditional Git authors which are ignored by Renovate. Must conform to RFC5322no[]
log-levelLog level to use for renovatenoinfo
npm-tokenNPM token to use for authenticationno
npm-usernameUsername to authenticate against the NPM registryno
npm-passwordPassword to authenticate against the NPM registryno
npm-scopeScope of the packages to use the custom NPM authentication (e.g @open-turo)no
npm-registryURL of the NPM registry to use the custom authentication forno
terraform-tokenToken to authenticate against terraform registryno

no outputs