open-turo/GitHub Action Renovatebot
GitHub Action that runs renovatebot with a very opinionated runner configuration. It supports configuring it to talk to private registries for Artifactory, Docker, NPM and Terraform.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 9, 2026
- License
- MIT
Pinned Snippet
uses: open-turo/action-renovate@eec490c31db70cc7c8be9191b61bbaad80a5f5b3 # v1.6.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| dry-run | Whether to run the action in dry-run mode | no | — |
| checkout-repo | Perform checkout as first step of action | no | true |
| artifactory-username | Username to authenticate against a maven artifactory | no | — |
| artifactory-password | Password to authenticate against a maven artifactory | no | — |
| artifactory-username-property-name | Name of the gradle property to use for the artifactory username | no | artifactoryUsername |
| artifactory-password-property-name | Name of the gradle property to use for the artifactory password | no | artifactoryAuthToken |
| artifactory-match-host | A domain name, host name or base URL to match maven artifactory libraries with (see https://docs.renovatebot.com/configuration-options/#matchhost) | no | — |
| artifactory-registry-urls | A comma separate list of extra registry URLs to tell renovate to use to find new versions of packages (e.g a jfrog registry) | no | — |
| artifactory-package-prefixes | Package prefix to tell renovate to look for dependencies in the artifactory-registry-urls (e.g com.openTuro) | no | — |
| env-regex | Override the environment variables which will be passsed into the renovate container. Defaults to `^(?:RENOVATE_\\w+|LOG_LEVEL|GITHUB_COM_TOKEN|NODE_OPTIONS|(?:HTTPS?|NO)_PROXY|(?:https?|no)_proxy)$` | no | — |
| extra-config | Extra configuration to pass to renovate. It has to be a valid JSON object. Use with caution as this could override the default configuration created by this action | no | {} |
| docker-username | Username to authenticate against docker hub | no | — |
| docker-password | Password to authenticate against docker hub | no | — |
| docker-volumes | Docker volume mounts. Default to /tmp:/tmp | no | /tmp:/tmp |
| github-token | GitHub token that can checkout the repository as well as create tags/releases against it. e.g. 'secrets.GITHUB_TOKEN' | yes | ${{ github.token }} |
| git-ignored-authors | Additional Git authors which are ignored by Renovate. Must conform to RFC5322 | no | [] |
| log-level | Log level to use for renovate | no | info |
| npm-token | NPM token to use for authentication | no | — |
| npm-username | Username to authenticate against the NPM registry | no | — |
| npm-password | Password to authenticate against the NPM registry | no | — |
| npm-scope | Scope of the packages to use the custom NPM authentication (e.g @open-turo) | no | — |
| npm-registry | URL of the NPM registry to use the custom authentication for | no | — |
| terraform-token | Token to authenticate against terraform registry | no | — |
Outputs
no outputs