diff --git a/.github/renovate.json b/.github/renovate.json
index eed4e8d65..46e9a58d1 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -1,10 +1,30 @@
 {
   "extends": [
-    "config:base"
+    "config:recommended"
   ],
   "commitMessagePrefix": "deps: ",
   "postUpdateOptions": [
     "gomodTidy"
   ],
-  "prConcurrentLimit": 3
+  "prConcurrentLimit": 3,
+  "packageRules": [
+    {
+      "matchPackagePatterns": [
+        "^actions/checkout",
+        "^actions/github-script",
+        "^actions/setup-go",
+        "^actions/upload-artifact",
+        "^dorny/paths-filter",
+        "^github/codeql-action",
+        "^golang/govulncheck-action",
+        "^golangci/golangci-lint-action",
+        "^google-github-actions/auth",
+        "^google-github-actions/get-secretmanager-secrets",
+        "^google-github-actions/setup-gcloud",
+        "^micnncim/action-label-syncer",
+        "^ossf/scorecard-action"
+      ],
+      "groupName": "dependencies for github"
+    }
+  ]
 }