diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..2c48305b7
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    groups:
+      github-actions:
+        patterns: ["*"]
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 91c0ee6d5..66ca53f31 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -39,13 +39,13 @@ jobs:
       # Checkout the code base #
       ##########################
       - name: Checkout Code
-        uses: actions/checkout@v2
+        uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
 
       ################################
       # Run Linter against code base #
       ################################
       - name: Lint Code Base
-        uses: github/super-linter@v4
+        uses: github/super-linter@985ef206aaca4d560cb9ee2af2b42ba44adc1d55 # v4.10.0
         env:
           VALIDATE_PYTHON: true
           VALIDATE_PYTHON_FLAKE8: true
diff --git a/.github/workflows/ogf_workflow.yml b/.github/workflows/ogf_workflow.yml
index 41fc79f28..d368e9191 100644
--- a/.github/workflows/ogf_workflow.yml
+++ b/.github/workflows/ogf_workflow.yml
@@ -80,13 +80,13 @@ jobs:
     # if you are making changes. Make sure they are the same.
     steps:         
       - name: Install node and npm
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@7c12f8017d5436eb855f1ed4399f037a36fbd9e8 # v2.5.2
         with:
           node-version: '16'
           check-latest: true
 
       - name: Azure Login
-        uses: azure/login@v1
+        uses: azure/login@cb79c773a3cfa27f31f25eb3f677781210c9ce3d # v1.6.1
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
 
@@ -103,7 +103,7 @@ jobs:
           ./k6 version
 
       - name: Setup Azure RG and Storage Account For Functions App
-        uses: Azure/cli@1.0.4
+        uses: Azure/cli@4b58c946a0f48d82cc2b6e31c0d15a6604859554 # 1.0.4
         with:
           azcliversion: 2.16.0
           inlineScript: |
@@ -128,7 +128,7 @@ jobs:
             sleep 3 # Adding some breathing space for Storage Account creation.
       - name: Create new Consumption Azure Function App
         if: ${{ matrix.sku == 'cons' }}
-        uses: Azure/cli@1.0.4
+        uses: Azure/cli@4b58c946a0f48d82cc2b6e31c0d15a6604859554 # 1.0.4
         with:
           azcliversion: 2.16.0
           inlineScript: |
@@ -391,7 +391,7 @@ jobs:
           ls -la $GITHUB_WORKSPACE
           
       - name: Upload a Build Artifact
-        uses: actions/upload-artifact@v2.2.1
+        uses: actions/upload-artifact@726a6dcd0199f578459862705eed35cda05af50b # v2.2.1
         with:
           # Artifact name
           name: RawTestRunArchive
@@ -421,7 +421,7 @@ jobs:
     needs: test
     steps:
       - name: Azure Login
-        uses: azure/login@v1
+        uses: azure/login@cb79c773a3cfa27f31f25eb3f677781210c9ce3d # v1.6.1
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
       - name: Cleaning up the resource group
diff --git a/.github/workflows/pr_title_enforcer.yml b/.github/workflows/pr_title_enforcer.yml
index f9f6c9195..0da72990c 100644
--- a/.github/workflows/pr_title_enforcer.yml
+++ b/.github/workflows/pr_title_enforcer.yml
@@ -15,6 +15,6 @@ jobs:
     name: Validate PR title
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@v5
+      - uses: amannn/action-semantic-pull-request@e32d7e603df1aa1ba07e981f2a23455dee596825 # v5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}