diff --git a/content/pages/github-actions-policy.md b/content/pages/github-actions-policy.md
index 4fa8758f7..9f3019ca5 100644
--- a/content/pages/github-actions-policy.md
+++ b/content/pages/github-actions-policy.md
@@ -8,8 +8,10 @@ For details on the use of requirement level terms, see the GitHub Actions Security.
### Dependabot
-All repositories using GitHub Actions **must** have Dependabot enabled.
-
+All repositories using GitHub Actions **must** have automatic dependency management in place using one of these tools:
+* GitHub Dependabot for the `github-actions` ecosystem
+* Forking Renovate using the GitHub actions manager
+
### Resource use
Due to misconfigurations in their builds, some projects have been using unsupportable numbers of [GitHub Actions](github-actions-secrets.html). As part of fixing this situation, Infra has established a policy for GitHub Actions use: