diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 4ac76b4..00946b1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,6 +16,8 @@ updates:
       all-actions:
         patterns:
           - "*"
+    cooldown:
+      default-days: 7
 
   # Python pip dependencies (backend)
   - package-ecosystem: "pip"
@@ -41,4 +43,4 @@ updates:
     groups:
       npm-deps:
         patterns:
-          - "*"
+          - "*"
\ No newline at end of file
diff --git a/.github/workflows/azure-dev.yml b/.github/workflows/azure-dev.yml
index 71393c9..9db53db 100644
--- a/.github/workflows/azure-dev.yml
+++ b/.github/workflows/azure-dev.yml
@@ -15,11 +15,11 @@ jobs:
     steps:
       # Step 1: Checkout the code from your repository
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
 
       # Step 2: Validate the Azure template using microsoft/template-validation-action
       - name: Validate Azure Template
-        uses: microsoft/template-validation-action@bae4895d0a8abd4f0d5aad68ae8647b3027f4c91
+        uses: microsoft/template-validation-action@bae4895d0a8abd4f0d5aad68ae8647b3027f4c91 # v0.4.4
         with:
           validateAzd: false
           useDevContainer: false