diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index ca79ca5..4b0f1bd 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,3 +4,7 @@ updates:
     directory: /
     schedule:
       interval: weekly
+    # The HOL action wraps a separately reviewed scanner wheel. Upgrade it only
+    # with the workflow comment, validator pin, wheel hash, provenance, and A/B report.
+    ignore:
+      - dependency-name: hashgraph-online/ai-plugin-scanner-action