diff --git a/.github/renovate-file-config.js b/.github/renovate-file-config.js
new file mode 100644
index 0000000000..325f35d44c
--- /dev/null
+++ b/.github/renovate-file-config.js
@@ -0,0 +1,10 @@
+module.exports = {
+    "autodiscover": true,
+    "hostRules": [
+        {
+            hostType: 'github',
+            matchHost: 'https://api.github.com/repos/rtbhouse-platform-engineering/renovate-scanner',
+            token: process.env.RENOVATE_CONFIG_PRESET_TOKEN,
+        },
+    ],
+};
diff --git a/.github/renovate.json5 b/.github/renovate.json5
new file mode 100644
index 0000000000..608be07415
--- /dev/null
+++ b/.github/renovate.json5
@@ -0,0 +1,6 @@
+{
+  $schema: "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "local>rtbhouse-platform-engineering/renovate-scanner//renovate/default.json5"
+  ]
+}
diff --git a/.github/workflows/automated-dependency-updates.yaml b/.github/workflows/automated-dependency-updates.yaml
new file mode 100644
index 0000000000..9be0538f37
--- /dev/null
+++ b/.github/workflows/automated-dependency-updates.yaml
@@ -0,0 +1,18 @@
+name: Automated dependency updates
+on:
+  schedule:
+    - cron: "0 5 * * *"
+  workflow_dispatch:
+
+jobs:
+  renovate:
+    name: Renovate
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: rtbhouse-platform-engineering/renovate-scanner/.github/actions/run-renovate@261480b2d6b5bb71fc7276c976a8e202f124de76 # v0.1.1
+        with:
+          gh-renovate-config-preset-app-id: ${{ vars.GH_READER_APP_ID }}
+          gh-renovate-config-preset-app-private-key: ${{ secrets.GH_READER_APP_PRIVATE_KEY }}
+          gh-renovate-app-id: ${{ vars.GH_RENOVATE_APP_ID }}
+          gh-renovate-app-private-key: ${{ secrets.GH_RENOVATE_APP_PRIVATE_KEY }}