diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
new file mode 100644
index 00000000..10a203b0
--- /dev/null
+++ b/.github/dependabot.yaml
@@ -0,0 +1,21 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "area/dependency"
+      - "ok-to-test"
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "area/dependency"
+      - "ok-to-test"
\ No newline at end of file
diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml
index 3e83ed74..5d50c67a 100644
--- a/.github/workflows/conformance.yml
+++ b/.github/workflows/conformance.yml
@@ -34,7 +34,7 @@ jobs:
       IP_FAMILY: ${{ matrix.ipFamily }}
     steps:
     - name: Check out code
-      uses: actions/checkout@v2
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
 
     - name: Enable ipv4 and ipv6 forwarding
       run: |
@@ -118,7 +118,7 @@ jobs:
 
     - name: Upload Junit Reports
       if: always()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v5
       with:
         name: kind-junit-${{ env.JOB_NAME }}-${{ github.run_id }}
         path: './_artifacts/*.xml'
@@ -130,7 +130,7 @@ jobs:
 
     - name: Upload logs
       if: always()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v5
       with:
         name: kind-logs-${{ env.JOB_NAME }}-${{ github.run_id }}
         path: ./_artifacts/logs
diff --git a/.github/workflows/policy-assistant.yml b/.github/workflows/policy-assistant.yml
index 6cd54def..36121883 100644
--- a/.github/workflows/policy-assistant.yml
+++ b/.github/workflows/policy-assistant.yml
@@ -30,10 +30,10 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
     - name: Check out code
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
 
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
       with:
         go-version: ${{ env.GO_VERSION }}
 
@@ -66,10 +66,10 @@ jobs:
     needs: go-tests
     steps:
     - name: Check out code
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
 
     - name: Set up Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
       with:
         go-version: ${{ env.GO_VERSION }}
 
@@ -84,7 +84,7 @@ jobs:
         cp cmd/policy-assistant/cmd/policy-assistant/policy-assistant artifacts/
 
     - name: Upload policy-assistant Binary
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v5
       with:
         name: policy-assistant-binary
         path: artifacts/policy-assistant
@@ -95,10 +95,10 @@ jobs:
     needs: build
     steps:
     - name: Check out code
-      uses: actions/checkout@v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
 
     - name: Download policy-assistant Binary
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v6
       with:
         name: policy-assistant-binary
         path: artifacts
diff --git a/cmd/policy-assistant/.github/workflows/kind_antrea.yml b/cmd/policy-assistant/.github/workflows/kind_antrea.yml
index 31a26ca5..91e677ea 100644
--- a/cmd/policy-assistant/.github/workflows/kind_antrea.yml
+++ b/cmd/policy-assistant/.github/workflows/kind_antrea.yml
@@ -16,9 +16,9 @@ jobs:
     name: Run policy-assistant on KinD/Antrea
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version: 1.18
       - name: Run policy-assistant
diff --git a/cmd/policy-assistant/.github/workflows/kind_calico.yml b/cmd/policy-assistant/.github/workflows/kind_calico.yml
index ca5202ad..f75e165d 100644
--- a/cmd/policy-assistant/.github/workflows/kind_calico.yml
+++ b/cmd/policy-assistant/.github/workflows/kind_calico.yml
@@ -15,9 +15,9 @@ jobs:
     name: Run policy-assistant on KinD/Calico
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version: 1.18
       - name: Run policy-assistant
diff --git a/cmd/policy-assistant/.github/workflows/kind_cilium.yml b/cmd/policy-assistant/.github/workflows/kind_cilium.yml
index 08dc105b..419d2949 100644
--- a/cmd/policy-assistant/.github/workflows/kind_cilium.yml
+++ b/cmd/policy-assistant/.github/workflows/kind_cilium.yml
@@ -15,9 +15,9 @@ jobs:
     name: Run policy-assistant on KinD/Cilium
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version: 1.18
       - name: Run policy-assistant
diff --git a/cmd/policy-assistant/.github/workflows/kind_cni_from_job.yml b/cmd/policy-assistant/.github/workflows/kind_cni_from_job.yml
index 75a42012..d9052902 100644
--- a/cmd/policy-assistant/.github/workflows/kind_cni_from_job.yml
+++ b/cmd/policy-assistant/.github/workflows/kind_cni_from_job.yml
@@ -11,7 +11,7 @@ jobs:
     name: Run policy-assistant on KinD
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
 
       - name: Run policy-assistant
         working-directory: hack/kind
diff --git a/cmd/policy-assistant/.github/workflows/kind_cni_from_source.yml b/cmd/policy-assistant/.github/workflows/kind_cni_from_source.yml
index 8516f3e5..7cb044de 100644
--- a/cmd/policy-assistant/.github/workflows/kind_cni_from_source.yml
+++ b/cmd/policy-assistant/.github/workflows/kind_cni_from_source.yml
@@ -15,10 +15,10 @@ jobs:
     name: Run policy-assistant on KinD
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
 
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version: 1.18
 
diff --git a/cmd/policy-assistant/.github/workflows/kind_ovn.yml b/cmd/policy-assistant/.github/workflows/kind_ovn.yml
index f770deac..7917a572 100644
--- a/cmd/policy-assistant/.github/workflows/kind_ovn.yml
+++ b/cmd/policy-assistant/.github/workflows/kind_ovn.yml
@@ -17,9 +17,9 @@ jobs:
     timeout-minutes: 250
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
       - name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version: 1.18
       - name: Run policy-assistant