diff --git a/src/incatools/odk/model.py b/src/incatools/odk/model.py
index 624c945..8166de1 100644
--- a/src/incatools/odk/model.py
+++ b/src/incatools/odk/model.py
@@ -1155,6 +1155,12 @@ class OntologyProject(JsonSchemaMixin):
     Currently available workflows: docs, diff, qc, release-diff.
     """
 
+    enable_dependabot: bool = False
+    """Enables Dependabot alerts for outdated GitHub Actions.
+
+    This is only meaningful if `ci` is set to `github_actions`.
+    """
+
     import_pattern_ontology: bool = False
     """Imports the DOSDP-derived pattern.owl file into the ontology."""
 
diff --git a/src/incatools/odk/templates/_dynamic_workflows.jinja2 b/src/incatools/odk/templates/_dynamic_workflows.jinja2
index d18f8cd..1131995 100644
--- a/src/incatools/odk/templates/_dynamic_workflows.jinja2
+++ b/src/incatools/odk/templates/_dynamic_workflows.jinja2
@@ -52,6 +52,15 @@ ontology_qc:
     - make ROBOT_ENV='ROBOT_JAVA_ARGS=-Xmx6G' test IMP=false PAT=false
 {%   endif %}{# ! 'gitlab-ci' in project.ci -#}
 {%   if 'github_actions' in project.ci -%}
+{%     if project.enable_dependabot -%}
+^^^ .github/dependabot.yml
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+{%     endif -%}
 {%     if 'qc' in project.workflows -%}
 ^^^ .github/workflows/qc.yml
 # Basic ODK workflow