diff --git a/.github/actions/sharedSteps/action.yml b/.github/actions/sharedSteps/action.yml
index db9c8af..9998186 100644
--- a/.github/actions/sharedSteps/action.yml
+++ b/.github/actions/sharedSteps/action.yml
@@ -25,7 +25,7 @@ runs:
     - name: Cache AzOps module
       if: ${{ env.MODULE_VERSION != '' }}
       id: cache-AzOps
-      uses: actions/cache@v4
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ${{ env.modulesFolder }}
         key: '"AzOpsModule" | ${{ env.MODULE_VERSION }}'
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..2c48305
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    groups:
+      github-actions:
+        patterns: ["*"]
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
diff --git a/.github/workflows/pull.yml b/.github/workflows/pull.yml
index 7bf6ff5..c408378 100644
--- a/.github/workflows/pull.yml
+++ b/.github/workflows/pull.yml
@@ -155,7 +155,7 @@ jobs:
       #
 
       - name: "Checkout"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           fetch-depth: 0
       
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index daffa57..a7b589c 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -73,7 +73,7 @@ jobs:
       #
 
       - name: "Checkout"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/redeploy.yml b/.github/workflows/redeploy.yml
index 860fd48..1e10348 100644
--- a/.github/workflows/redeploy.yml
+++ b/.github/workflows/redeploy.yml
@@ -91,7 +91,7 @@ jobs:
       #
 
       - name: "Checkout"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 9d291cd..fb97af8 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -42,7 +42,7 @@ jobs:
     #
 
     - name: "Checkout"
-      uses: actions/checkout@v4
+      uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
       with:
         token: ${{ secrets.WORKFLOW_TOKEN }}
         fetch-depth: 0
@@ -55,7 +55,7 @@ jobs:
     #
 
     - name: "Checkout"
-      uses: actions/checkout@v4
+      uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
         repository: 'Azure/AzOps-Accelerator'
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index a535adf..562eaed 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -67,7 +67,7 @@ jobs:
       #
 
       - name: "Checkout"
-        uses: actions/checkout@v4
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
         with:
           fetch-depth: 0