diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a29e261..7450e97 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,12 +10,22 @@ on:
     paths-ignore:
       - "**.md"
 
-permissions:
-  contents: read
-
 jobs:
+  lint:
+    runs-on: ubuntu-22.04
+    timeout-minutes: 3
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v3
+      - name: Validate renovate.json
+        run: npx --package renovate -c 'renovate-config-validator'
+
   setup-docker:
     runs-on: ubuntu-22.04
+    timeout-minutes: 3
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v3
       - uses: ./setup-docker
diff --git a/renovate.json b/renovate.json
index 14c9c44..57e572b 100644
--- a/renovate.json
+++ b/renovate.json
@@ -12,5 +12,14 @@
       "matchUpdateTypes": ["minor", "patch"],
       "automergeStrategy": "squash"
     }
+  ],
+  "regexManagers": [
+    {
+      "fileMatch": ["^README.md$"],
+      "matchStrings": ["peaceiris/workflows/.+@v(?<currentValue>\d+\.\d+\.\d+)"],
+      "depNameTemplate": "github-actions",
+      "datasourceTemplate": "github-releases",
+      "depNameTemplate": "peaceiris/workflows"
+    }
   ]
 }