diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..2c48305b
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    groups:
+      github-actions:
+        patterns: ["*"]
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
diff --git a/.github/workflows/expectations.yml b/.github/workflows/expectations.yml
index 4bf6ac83..826a6638 100644
--- a/.github/workflows/expectations.yml
+++ b/.github/workflows/expectations.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - name: Checkout Repository
         id: checkout_repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Comment on Community PRs
         uses: MicrosoftDocs/PowerShell-Docs/.github/actions/commenting/expectations/v1@main
         with:
diff --git a/.github/workflows/quality.issue.yml b/.github/workflows/quality.issue.yml
index de956745..7bfc83d8 100644
--- a/.github/workflows/quality.issue.yml
+++ b/.github/workflows/quality.issue.yml
@@ -12,7 +12,7 @@ jobs:
     outputs:
       check: ${{ steps.is-quality.outputs.match != '' }}
     steps:
-      - uses: actions-ecosystem/action-regex-match@v2
+      - uses: actions-ecosystem/action-regex-match@9e6c4fb3d5e898f505be7a1fb6e7b0a278f6665b # v2.0.2
         id: is-quality
         with:
           text: ${{ github.event.issue.body }}
@@ -25,7 +25,7 @@ jobs:
     if: needs.quality.outputs.check == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions-ecosystem/action-add-assignees@v1
+      - uses: actions-ecosystem/action-add-assignees@a5b84af721c4a621eb9c7a4a95ec20a90d0b88e9 # v1.0.1
         with:
           github_token: ${{ secrets.github_token }}
           assignees: ${{ github.event.issue.user.login }}
@@ -52,13 +52,13 @@ jobs:
           - regex: Spelling
             label: quality-spelling
     steps:
-      - uses: actions-ecosystem/action-regex-match@v2
+      - uses: actions-ecosystem/action-regex-match@9e6c4fb3d5e898f505be7a1fb6e7b0a278f6665b # v2.0.2
         id: matcher
         with:
           text: ${{ github.event.issue.body }}
           regex: '^### Quality Areas\s*^.*${{ matrix.regex }}.*$'
           flags: gm
-      - uses: actions-ecosystem/action-add-labels@v1
+      - uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf # v1.1.3
         if: steps.matcher.outputs.match != ''
         with:
           labels: ${{ matrix.label }}
diff --git a/.github/workflows/quality.pr.yml b/.github/workflows/quality.pr.yml
index 072672cd..79662e67 100644
--- a/.github/workflows/quality.pr.yml
+++ b/.github/workflows/quality.pr.yml
@@ -33,6 +33,6 @@ jobs:
       needs.check.outputs.title == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions-ecosystem/action-add-labels@v1
+      - uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf # v1.1.3
         with:
           labels: project-quality
diff --git a/.github/workflows/stale-content.yml b/.github/workflows/stale-content.yml
index 87db1548..b2e35d0c 100644
--- a/.github/workflows/stale-content.yml
+++ b/.github/workflows/stale-content.yml
@@ -22,7 +22,7 @@ jobs:
     steps:
       - name: Checkout Repository
         id: checkout_repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Write Report
         uses: MicrosoftDocs/PowerShell-Docs/.github/actions/reporting/stale-content/v1@main
         with: