diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..9c312e1
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,9 @@
+version: 2
+updates:
+  # Enable version updates for github-actions
+  - package-ecosystem: "github-actions"
+    # Look for a `Dockerfile` in the `root` directory
+    directory: "/"
+    # Check for updates once a month
+    schedule:
+      interval: "monthly"
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c9ff33f..0e74f68 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -72,7 +72,8 @@ jobs:
   check-tracing-runtime:
     name: "Check tracing runtime"
     if: github.event.pull_request.draft == false
-    runs-on: ubuntu-latest
+    runs-on:
+      labels: bare-metal
     needs: ["list-spec-versions"]
     strategy:
       matrix: