diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index fcd9800ba..16d9cea23 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,3 +4,10 @@ updates:
     directory: "examples/signaling-server-nodejs"
     schedule:
       interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directories:
+      - ".github/workflows"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 15
diff --git a/.github/workflows/build-gnutls.yml b/.github/workflows/build-gnutls.yml
index 7974d67db..2e31ecd05 100644
--- a/.github/workflows/build-gnutls.yml
+++ b/.github/workflows/build-gnutls.yml
@@ -8,7 +8,7 @@ jobs:
   build-linux:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libgnutls28-dev nettle-dev libsrtp2-dev
     - name: submodules
@@ -22,7 +22,7 @@ jobs:
   build-macos:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: brew install gnutls nettle
     - name: submodules
diff --git a/.github/workflows/build-mbedtls.yml b/.github/workflows/build-mbedtls.yml
index ca203d394..3ed2d837a 100644
--- a/.github/workflows/build-mbedtls.yml
+++ b/.github/workflows/build-mbedtls.yml
@@ -8,9 +8,9 @@ jobs:
   build-linux:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: Set up Homebrew
-      uses: Homebrew/actions/setup-homebrew@master
+      uses: Homebrew/actions/setup-homebrew@98cfa07b984a61682e6cd3a0833fad2006cc84ba #master
     - name: Install Mbed TLS
       run: brew update && brew install mbedtls
     - name: submodules
@@ -24,7 +24,7 @@ jobs:
   build-macos:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: Install Mbed TLS
       run: brew update && brew install mbedtls
     - name: submodules
diff --git a/.github/workflows/build-nice.yml b/.github/workflows/build-nice.yml
index bf5ec16ee..931c07025 100644
--- a/.github/workflows/build-nice.yml
+++ b/.github/workflows/build-nice.yml
@@ -8,7 +8,7 @@ jobs:
   build-nice:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libgnutls28-dev libnice-dev
     - name: submodules
diff --git a/.github/workflows/build-nomedia.yml b/.github/workflows/build-nomedia.yml
index 1fd75a6b4..0bcef537e 100644
--- a/.github/workflows/build-nomedia.yml
+++ b/.github/workflows/build-nomedia.yml
@@ -8,7 +8,7 @@ jobs:
   build-nomedia:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libssl-dev
     - name: submodules
@@ -22,8 +22,8 @@ jobs:
   build-nomedia-windows:
     runs-on: windows-latest
     steps:
-    - uses: actions/checkout@v2
-    - uses: ilammy/msvc-dev-cmd@v1
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
+    - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 #v1
     - name: install packages
       run: choco install openssl --version=3.1.1
     - name: submodules
diff --git a/.github/workflows/build-nowebsocket.yml b/.github/workflows/build-nowebsocket.yml
index 8de1f9d5e..d9dd12072 100644
--- a/.github/workflows/build-nowebsocket.yml
+++ b/.github/workflows/build-nowebsocket.yml
@@ -10,7 +10,7 @@ jobs:
   build-nowebsocket:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libssl-dev libsrtp2-dev
     - name: submodules
diff --git a/.github/workflows/build-openssl.yml b/.github/workflows/build-openssl.yml
index f1a925bea..a9e315f62 100644
--- a/.github/workflows/build-openssl.yml
+++ b/.github/workflows/build-openssl.yml
@@ -8,7 +8,7 @@ jobs:
   build-linux:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libssl-dev libsrtp2-dev
     - name: submodules
@@ -22,7 +22,7 @@ jobs:
   build-macos:
     runs-on: macos-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: HOMEBREW_NO_INSTALL_CLEANUP=1 brew reinstall openssl@1.1
     - name: submodules
@@ -38,8 +38,8 @@ jobs:
   build-windows:
     runs-on: windows-latest
     steps:
-    - uses: actions/checkout@v2
-    - uses: ilammy/msvc-dev-cmd@v1
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
+    - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 #v1
     - name: install packages
       run: choco install openssl --version=3.1.1
     - name: submodules
diff --git a/.github/workflows/check-version.yml b/.github/workflows/check-version.yml
index 7e095eea7..1d3291002 100644
--- a/.github/workflows/check-version.yml
+++ b/.github/workflows/check-version.yml
@@ -8,7 +8,7 @@ jobs:
   check-version:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 #v2
     - name: install packages
       run: sudo apt update && sudo apt install libssl-dev libsrtp2-dev
     - name: submodules