From 7f596ddd96099cd41ee6e1d92ba0df8f46091186 Mon Sep 17 00:00:00 2001
From: "renovate-rancher[bot]"
 <119870437+renovate-rancher[bot]@users.noreply.github.com>
Date: Thu, 23 Jan 2025 12:47:17 +0000
Subject: [PATCH] Add initial Renovate configuration

---
 .../workflows/{renovate.yml => renovate-vault.yml}   | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)
 rename .github/workflows/{renovate.yml => renovate-vault.yml} (76%)

diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate-vault.yml
similarity index 76%
rename from .github/workflows/renovate.yml
rename to .github/workflows/renovate-vault.yml
index b5bb6b43..52f6a5d2 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate-vault.yml
@@ -13,13 +13,17 @@ on:
         default: "false"
         type: string
   # Run twice in the early morning (UTC) for initial and follow up steps (create pull request and merge)
-  #schedule:
-  #  - cron: '30 4,6 * * *'
+  schedule:
+    - cron: '30 4,6 * * *'
+
+permissions:
+  contents: read
+  id-token: write
 
 jobs:
   call-workflow:
-    uses: rancher/renovate-config/.github/workflows/renovate.yml@release
+    uses: rancher/renovate-config/.github/workflows/renovate-vault.yml@release
     with:
       logLevel: ${{ inputs.logLevel || 'info' }}
       overrideSchedule: ${{ github.event.inputs.overrideSchedule == 'true' && '{''schedule'':null}' || '' }}
-    secrets: inherit
\ No newline at end of file
+    secrets: inherit