diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 84c87d6..f08cd93 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,6 +1,10 @@
 version: 2
 updates:
-  - package-ecosystem: "docker"
-    directory: "/"
+  - package-ecosystem: docker
+    directory: /
     schedule:
-      interval: "weekly"
+      interval: weekly
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
diff --git a/.github/workflows/security-gate.yml b/.github/workflows/security-gate.yml
new file mode 100644
index 0000000..fba53b1
--- /dev/null
+++ b/.github/workflows/security-gate.yml
@@ -0,0 +1,32 @@
+name: Security Gate - Instriq
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    env:
+      MAX_CRITICAL: 0
+      MAX_HIGH: 0
+      MAX_MEDIUM: 0
+      MAX_LOW: 0
+      GITHUB_TOKEN: ${{ secrets.TOKEN }}
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Pull Docker image from GitHub Container Registry
+      run: docker pull ghcr.io/instriq/security-gate/security-gate:latest
+
+    - name: Verify security alerts from dependabot
+      run: |
+        docker run ghcr.io/instriq/security-gate/security-gate:latest \
+        -t $GITHUB_TOKEN \
+        -r ${{ github.repository }} \
+        --critical $MAX_CRITICAL \
+        --high $MAX_HIGH \
+        --medium $MAX_MEDIUM \
+        --low $MAX_LOW
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 612d093..69372cb 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -6,7 +6,7 @@ jobs:
     runs-on: ubuntu-latest
     
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v4
     - name: Install dependencies
       run: |
         sudo apt install -y perl cpanminus