diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..2c48305b7
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    groups:
+      github-actions:
+        patterns: ["*"]
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 029a74f3f..ae4ea071c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,7 +17,7 @@ jobs:
       pull-requests: write
       security-events: write
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
       with:
         fetch-depth: 2
     - name: Prepare scenarios to be released.
@@ -58,7 +58,7 @@ jobs:
     - name: Setup release
       if: env.scenarios_changed == 'true'
       id: create_release
-      uses: actions/create-release@v1
+      uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -68,7 +68,7 @@ jobs:
         prerelease: false
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -78,7 +78,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -88,7 +88,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -98,7 +98,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -108,7 +108,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -118,7 +118,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -128,7 +128,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -138,7 +138,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -148,7 +148,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -158,7 +158,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -168,7 +168,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -178,7 +178,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -188,7 +188,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -198,7 +198,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -208,7 +208,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -218,7 +218,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -228,7 +228,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -238,7 +238,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -248,7 +248,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
diff --git a/.github/workflows/script-cleanup.yml b/.github/workflows/script-cleanup.yml
index bacbcf9ff..f4f5ae9cb 100644
--- a/.github/workflows/script-cleanup.yml
+++ b/.github/workflows/script-cleanup.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Az CLI login'
-        uses: azure/login@v1
+        uses: azure/login@cb79c773a3cfa27f31f25eb3f677781210c9ce3d # v1.6.1
         with:
             client-id: ${{ secrets.AZURE_CLIENT_ID }}
             tenant-id: ${{ secrets.AZURE_TENANT_ID }}
diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
index 230bb15dc..548c9dda1 100644
--- a/.github/workflows/sync.yml
+++ b/.github/workflows/sync.yml
@@ -16,20 +16,20 @@ jobs:
     environment: ScenarioTesting
     steps:
     - name: Checkout executable-docs
-      uses: actions/checkout@v2
+      uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
       with:
         repository: 'MicrosoftDocs/executable-docs'
         token: ${{ secrets.PAT }} # This line is added
 
     - name: 'Az CLI login'
-      uses: azure/login@v1
+      uses: azure/login@cb79c773a3cfa27f31f25eb3f677781210c9ce3d # v1.6.1
       with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
           subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
 
     - name: Setup Python environment
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2.3.4
       with:
         python-version: '3.10'
 
diff --git a/.github/workflows/test_release.yml b/.github/workflows/test_release.yml
index 2ec4638cd..ae6cd1cbe 100644
--- a/.github/workflows/test_release.yml
+++ b/.github/workflows/test_release.yml
@@ -18,7 +18,7 @@ jobs:
       security-events: write
     if: startsWith(github.ref, 'refs/heads/test_')
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
       with:
         fetch-depth: 2
         ref: ${{ github.ref }}
@@ -66,7 +66,7 @@ jobs:
     - name: Setup release
       if: env.scenarios_changed == 'true' 
       id: create_release
-      uses: actions/create-release@v1
+      uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -76,7 +76,7 @@ jobs:
         prerelease: true
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true' 
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -86,7 +86,7 @@ jobs:
         asset_content_type: application/zip        
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -96,7 +96,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -106,7 +106,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -116,7 +116,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -126,7 +126,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -136,7 +136,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -146,7 +146,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -156,7 +156,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -166,7 +166,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -176,7 +176,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -186,7 +186,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -196,7 +196,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -206,7 +206,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -216,7 +216,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -226,7 +226,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -236,7 +236,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -246,7 +246,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -256,7 +256,7 @@ jobs:
         asset_content_type: application/zip
     - name: Upload Release Asset
       if: env.scenarios_changed == 'true'
-      uses: actions/upload-release-asset@v1
+      uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
diff --git a/.github/workflows/yml_to_localized_folders.yml b/.github/workflows/yml_to_localized_folders.yml
index 824b2f0c6..e01237086 100644
--- a/.github/workflows/yml_to_localized_folders.yml
+++ b/.github/workflows/yml_to_localized_folders.yml
@@ -18,7 +18,7 @@ jobs:
       pull-requests: write
       security-events: write
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@0717577d45739eb3c851188b29f50ed6c0b2194e # v2.8.0
     
     - name: Copy yml files
       run: |