From 7a6b6868ecc61918295ae58c2472ded007dff27d Mon Sep 17 00:00:00 2001
From: "renovate-rancher[bot]"
 <119870437+renovate-rancher[bot]@users.noreply.github.com>
Date: Thu, 23 Jan 2025 13:06:38 +0000
Subject: [PATCH] Add initial Renovate configuration

---
 .github/workflows/{renovate.yml => renovate-vault.yml} | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)
 rename .github/workflows/{renovate.yml => renovate-vault.yml} (84%)

diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate-vault.yml
similarity index 84%
rename from .github/workflows/renovate.yml
rename to .github/workflows/renovate-vault.yml
index abade6bf..52f6a5d2 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate-vault.yml
@@ -16,9 +16,13 @@ on:
   schedule:
     - cron: '30 4,6 * * *'
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   call-workflow:
-    uses: rancher/renovate-config/.github/workflows/renovate.yml@release
+    uses: rancher/renovate-config/.github/workflows/renovate-vault.yml@release
     with:
       logLevel: ${{ inputs.logLevel || 'info' }}
       overrideSchedule: ${{ github.event.inputs.overrideSchedule == 'true' && '{''schedule'':null}' || '' }}