---
updatedAt: 2026-08-27T17:46:28.000Z
agentTools:
  projectIndex: https://docs.scalr.io/llms.txt
---

# Renovate

# Overview

This guide provides instructions on configuring Renovate to work with the Scalr [private module registry](https://docs.scalr.io/docs/private-module-registry). Renovate will automatically check for updates to Terraform modules stored in Scalr and create pull requests to update them.

# GitHub

## Step 0: Install Renovate

1. Install from [github.com/apps/renovate](https://github.com/apps/renovate), choose repos.
2. Check the repo's mode on [developer.mend.io](https://developer.mend.io). If it says **Silent**, Renovate will only do lookups, no PRs, until you switch it to interactive mode in repo/org settings there.
3. If interactive, merge the "Configure Renovate" onboarding PR when it appears.

## Step 1: Scalr API token

In Scalr, create a service account token for Renovate to scan the Scalr module regsitry:

1. **Security > IAM > Roles** → new role with `environments:read` and `modules:read`.
2. **Security > IAM > Service Accounts** → new service account, grant it that role.
3. Generate the token on the service account.

## Step 2: Store the token

Go to developer.mend.io → org or repo settings → **Credentials / Add Host Rule:**

1. Click Credentials and add the Scalr service account token.
2. Click Host Rules and add a rule (update HostURL and secret):

<Image src="https://files.readme.io/5f38b517024a9af2ed659a1652bd411df33526caf316c594dd508e6efe5e4493-Screenshot_2026-08-27_at_11.51.18_AM.png" width="400px" />

<br />

## Step 3: Let Renovate onboard itself

No need to create `renovate.json` by hand. Once the host rule from Step 2 is in place and the repo isn't stuck in Silent mode, Renovate scans the repo on its own and opens a **"Configure Renovate"** PR that adds a default `renovate.json` for you:

```json
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:recommended"]
}
```

Review and merge that PR. Then the *next* run opens the actual module-update PRs.

![](https://files.readme.io/48da816562ba04fc472dd055a93301f528502a5ce9da19d0d648966b8baf55e1-Screenshot_2026-08-27_at_11.58.09_AM.png)

<br />

## Step 4: Scanning the Module Registry

Now that Renovate has access to the Scalr module registry and has onboarded into the repos, Renovate will start scanning the module registry to identify modules in repos that are out of date. This will happen automatically, or a scan can be forced:

![](https://files.readme.io/30541f1b95bc48d3d717bd3dcb54d72f3524d7a8af670144a2a9c3c268574f1b-Screenshot_2026-08-27_at_12.00.35_PM.png)

<br />

## Troubleshooting

* **No PRs at all:** check for `mode=silent` in the run log — auth/lookups can succeed while PRs stay suppressed. Switch out of Silent mode.
* **Auth failing:** confirm the host rule's host matches the module `source` hostname exactly. Success looks like `hostRules: applying Bearer authentication for <host>` in the log.
* **Major bump not opening a PR:** check for `needs-approval` in the log — may be waiting on the Dependency Dashboard issue instead of opening directly.

# Sibling pages

* [AWS EventBridge](https://docs.scalr.io/scalr/docs/aws-event-bridge.md)
* [Azure DevOps](https://docs.scalr.io/scalr/docs/azure-devops.md)
* [Backstage](https://docs.scalr.io/scalr/docs/backstage.md)
* [Bitbucket Cloud](https://docs.scalr.io/scalr/docs/bitbucket-cloud.md)
* [Bitbucket Datacenter](https://docs.scalr.io/scalr/docs/bitbucket-datacenter.md)
* [Checkov](https://docs.scalr.io/scalr/docs/checkov.md)
* [Datadog](https://docs.scalr.io/scalr/docs/datadog.md)
* [Dependabot](https://docs.scalr.io/scalr/docs/dependabot.md)
* [GitHub](https://docs.scalr.io/scalr/docs/github.md)
* [GitLab](https://docs.scalr.io/scalr/docs/gitlab.md)
* [Infracost](https://docs.scalr.io/scalr/docs/infracost.md)
* [Microsoft Teams](https://docs.scalr.io/scalr/docs/msteams.md)
* [OpenMetrics](https://docs.scalr.io/scalr/docs/openmetrics.md)
* [OpenTofu](https://docs.scalr.io/scalr/docs/opentofu.md)
* [Open Policy Agent](https://docs.scalr.io/scalr/docs/policy-as-code.md)
* [Single Sign-On (SSO)](https://docs.scalr.io/scalr/docs/single-sign-on.md)
* [Slack](https://docs.scalr.io/scalr/docs/slack.md)
* [Terraform](https://docs.scalr.io/scalr/docs/terraform.md)
* [Terragrunt](https://docs.scalr.io/scalr/docs/terragrunt.md)
* [VSCode Extension](https://docs.scalr.io/scalr/docs/vscode-extension.md)
* [Webhooks](https://docs.scalr.io/scalr/docs/webhooks.md)
* [Wiz](https://docs.scalr.io/scalr/docs/wiz.md)