Renovate is a tool for: "Automated dependency updates. Multi-platform and multi-language.".
We require all commits pushed directly to official projects to be signed, so a master key and signing key have been generated for Renovate. Both keys are stored in renovate.asc and Renovate only has access to the signing key.