renovatebot-github/action.yml
Stefano Polloni 49e993f921
feat: add docker-ssh option to expose SSH credentials to container
Add a new `docker-ssh` input option that allows exposing SSH agent sockets
or keys to the Renovate Docker container via the `--ssh` flag. This enables
Renovate to access private repositories or registries that require SSH
authentication during the build process.

The implementation follows the same pattern as other docker-* options and
includes full documentation with usage examples.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-21 11:23:12 -04:00

72 lines
2.3 KiB
YAML

name: 'Renovate Bot GitHub Action'
description: 'GitHub Action to run self-hosted Renovate.'
author: 'Jeroen de Bruijn'
branding:
icon: refresh-cw
color: blue
inputs:
configurationFile:
description: |
Configuration file to configure Renovate. Either use this input or the
'RENOVATE_CONFIG_FILE' environment variable.
required: false
token:
description: |
GitHub personal access token that Renovate should use. This should be
configured using a Secret. Either use this input or the 'RENOVATE_TOKEN'
environment variable.
required: false
env-regex:
description: |
Override the environment variables which will be passsed into the renovate container.
Defaults to `^(?:RENOVATE_\\w+|LOG_LEVEL|GITHUB_COM_TOKEN|NODE_OPTIONS|(?:HTTPS?|NO)_PROXY|(?:https?|no)_proxy)$`
required: false
renovate-version:
description: |
Renovate version to use.
required: false
default: '41' # renovate
renovate-image:
description: |
Renovate docker image name.
required: false
default: ghcr.io/renovatebot/renovate
mount-docker-socket:
description: |
Mount the Docker socket inside the renovate container so that the commands
can use Docker. Also add the user inside the renovate container to the
docker group for socket permissions.
required: false
docker-socket-host-path:
description: |
Allows the overriding of the host path for the Docker socket that is mounted into the container.
Useful on systems where the host Docker socket is located somewhere other than '/var/run/docker.sock' (the default).
Only applicable when 'mount-docker-socket' is true.
required: false
default: /var/run/docker.sock
docker-cmd-file:
description: |
Override docker command. Default command is `renovate`
required: false
docker-network:
description: |
Docker network.
required: false
docker-user:
description: |
Docker user. Default to an unprivileged user
required: false
docker-volumes:
description: |
Docker volume mounts. Default to /tmp:/tmp
default: /tmp:/tmp
required: false
docker-ssh:
description: |
List of SSH agent socket or keys to expose to the build.
This maps to the --ssh flag in docker buildx build.
required: false
runs:
using: node20
main: dist/index.js