diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 0000000..215e3c9
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,12 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "regexManagers": [
+    {
+      "fileMatch": ["\\.nix$"],
+      "matchStrings": [
+        "\"(?<depName>[\\w-]+/[\\w-]+)@(?<currentValue>[\\w.]+)\""
+      ],
+      "datasourceTemplate": "github-runners"
+    }
+  ]
+}
diff --git a/module/interface.nix b/module/interface.nix
index e4819c8..ba76d7d 100644
--- a/module/interface.nix
+++ b/module/interface.nix
@@ -73,6 +73,7 @@ in
           type = types.str;
           default = "actions/checkout@v6";
           description = "The default checkout action to use for jobs";
+          # renovate:ignore
           example = "actions/checkout@v5";
         };
 
diff --git a/module/tests/github-actions/job.nix b/module/tests/github-actions/job.nix
index 6340f84..daa6b9c 100644
--- a/module/tests/github-actions/job.nix
+++ b/module/tests/github-actions/job.nix
@@ -174,6 +174,7 @@
   test-github-actions-job-custom-checkout-action = {
     expr = test-lib.eval-github-actions {
       pipeline.github-actions.defaultRunsOn = "ubuntu-latest";
+      # renovate:ignore
       pipeline.github-actions.checkoutAction = "actions/checkout@v5";
       jobs.job1 = {
         checkout = true;
@@ -184,6 +185,7 @@
       jobs.job1 = {
         runs-on = "ubuntu-latest";
         steps = [
+          # renovate:ignore
           { uses = "actions/checkout@v5"; }
           { run = "echo hello"; }
         ];
@@ -194,6 +196,7 @@
   test-github-actions-changes-job-uses-custom-checkout-action = {
     expr = test-lib.eval-github-actions {
       pipeline.github-actions.defaultRunsOn = "ubuntu-latest";
+      # renovate:ignore
       pipeline.github-actions.checkoutAction = "actions/checkout@v5";
       jobs = {
         job-a = {
@@ -210,6 +213,7 @@
           outputs.changes = "\${{ steps.diff.outputs.changes }}";
           runs-on = "ubuntu-latest";
           steps = [
+            # renovate:ignore
             { uses = "actions/checkout@v5"; }
             {
               id = "diff";
@@ -224,6 +228,7 @@
           "if" = ''''${{ fromJSON(needs.changes.outputs.changes)['job-a'] == true }}'';
           runs-on = "ubuntu-latest";
           steps = [
+            # renovate:ignore
             { uses = "actions/checkout@v5"; }
           ];
         };