diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..cdced8f1b
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,8 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    cooldown:
+      default-days: 7
\ No newline at end of file
diff --git a/.github/workflows/mac_mpich.yml b/.github/workflows/mac_mpich.yml
index bd52d5ac8..d51ff5593 100644
--- a/.github/workflows/mac_mpich.yml
+++ b/.github/workflows/mac_mpich.yml
@@ -34,7 +34,7 @@ jobs:
       runs-on: macos-latest
       timeout-minutes: 120
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         - name: Set up dependencies
           run: |
             # brew install gcc
diff --git a/.github/workflows/mac_mpich_lustre.yml b/.github/workflows/mac_mpich_lustre.yml
index 444449a4a..e72899c7e 100644
--- a/.github/workflows/mac_mpich_lustre.yml
+++ b/.github/workflows/mac_mpich_lustre.yml
@@ -34,7 +34,7 @@ jobs:
       runs-on: macos-latest
       timeout-minutes: 120
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         - name: Set up dependencies
           run: |
             # brew install gcc
diff --git a/.github/workflows/mac_openmpi.yml b/.github/workflows/mac_openmpi.yml
index b0fdfd66d..72896a659 100644
--- a/.github/workflows/mac_openmpi.yml
+++ b/.github/workflows/mac_openmpi.yml
@@ -34,7 +34,7 @@ jobs:
       runs-on: macos-latest
       timeout-minutes: 120
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         - name: Set up dependencies
           run: |
             # brew install gcc
diff --git a/.github/workflows/mac_openmpi_lustre.yml b/.github/workflows/mac_openmpi_lustre.yml
index f90fc8b2b..fba79468b 100644
--- a/.github/workflows/mac_openmpi_lustre.yml
+++ b/.github/workflows/mac_openmpi_lustre.yml
@@ -34,7 +34,7 @@ jobs:
       runs-on: macos-latest
       timeout-minutes: 120
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         - name: Set up dependencies
           run: |
             # brew install gcc
diff --git a/.github/workflows/ubuntu_mpich.yml b/.github/workflows/ubuntu_mpich.yml
index 5a41e36b7..d7efa7303 100644
--- a/.github/workflows/ubuntu_mpich.yml
+++ b/.github/workflows/ubuntu_mpich.yml
@@ -30,7 +30,7 @@ jobs:
       runs-on: ubuntu-latest
       timeout-minutes: 120
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         - name: Set up dependencies
           run: |
             sudo apt-get update
diff --git a/.github/workflows/ubuntu_mpich_lustre.yml b/.github/workflows/ubuntu_mpich_lustre.yml
index 6472279d4..2e00a4895 100644
--- a/.github/workflows/ubuntu_mpich_lustre.yml
+++ b/.github/workflows/ubuntu_mpich_lustre.yml
@@ -30,7 +30,7 @@ jobs:
       runs-on: ubuntu-latest
       timeout-minutes: 120
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         - name: Set up dependencies
           run: |
             sudo apt-get update
diff --git a/.github/workflows/ubuntu_openmpi.yml b/.github/workflows/ubuntu_openmpi.yml
index b12d389b9..62f8b77b0 100644
--- a/.github/workflows/ubuntu_openmpi.yml
+++ b/.github/workflows/ubuntu_openmpi.yml
@@ -30,7 +30,7 @@ jobs:
       runs-on: ubuntu-latest
       timeout-minutes: 120
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         - name: Set up dependencies
           run: |
             sudo apt-get update
diff --git a/.github/workflows/ubuntu_openmpi_adios.yml b/.github/workflows/ubuntu_openmpi_adios.yml
index 71b735e40..37e0d4ce5 100644
--- a/.github/workflows/ubuntu_openmpi_adios.yml
+++ b/.github/workflows/ubuntu_openmpi_adios.yml
@@ -31,7 +31,7 @@ jobs:
       runs-on: ubuntu-latest
       timeout-minutes: 120
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         - name: Set up dependencies
           run: |
             sudo apt-get update
diff --git a/.github/workflows/ubuntu_openmpi_lustre.yml b/.github/workflows/ubuntu_openmpi_lustre.yml
index 76faecc52..2a2a39189 100644
--- a/.github/workflows/ubuntu_openmpi_lustre.yml
+++ b/.github/workflows/ubuntu_openmpi_lustre.yml
@@ -30,7 +30,7 @@ jobs:
       runs-on: ubuntu-latest
       timeout-minutes: 120
       steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         - name: Set up dependencies
           run: |
             sudo apt-get update