diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..5b4454ae0
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,15 @@
+# Update schedule for GitHub Actions https://docs.github.com/en/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/keeping-your-actions-up-to-date-with-dependabot
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      updates:
+        applies-to: version-updates
+        patterns: ["*"] #wildcard, needs brackets as bugfix apparently
+      security:
+        applies-to: security-updates
+        patterns: ["*"]