diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..7d741b003d
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,32 @@
+version: 2
+updates:
+- package-ecosystem: gomod
+  directory: "/"
+  schedule:
+    interval: daily
+    time: "04:00"
+  open-pull-requests-limit: 10
+  ignore:
+  - dependency-name: github.com/klauspost/compress
+    versions:
+    - 1.11.12
+    - 1.11.13
+    - 1.11.7
+    - 1.11.8
+    - 1.11.9
+    - 1.12.1
+  - dependency-name: github.com/Microsoft/hcsshim
+    versions:
+    - 0.8.14
+    - 0.8.15
+  - dependency-name: github.com/sirupsen/logrus
+    versions:
+    - 1.7.0
+    - 1.7.1
+    - 1.8.0
+  - dependency-name: github.com/opencontainers/runc
+    versions:
+    - 1.0.0-rc92
+  - dependency-name: github.com/hashicorp/go-multierror
+    versions:
+    - 1.1.0