diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b1c1ce62bf..e622dcaf9c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,6 +16,15 @@ updates:
   - 'area/dependency'
   - 'release-note-none'
   - 'ok-to-test'
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    interval: "weekly"
+    day: "sunday"
+  labels:
+  - "ok-to-test"
+  - 'area/dependency'
+  - 'release-note-none'
 - package-ecosystem: gomod
   directory: /providers
   schedule:
diff --git a/.github/workflows/auto-tag.yml b/.github/workflows/auto-tag.yml
index d127e76857..e4d2e2fe54 100644
--- a/.github/workflows/auto-tag.yml
+++ b/.github/workflows/auto-tag.yml
@@ -12,7 +12,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           fetch-depth: 0 # Fetch all history and tags