diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6460051dc..809259436 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,8 +4,7 @@ updates:
     directory: "/graph-data.rs"
     schedule:
       interval: "daily"
-    reviewers:
-      - "wking"
-      - "vrutkovs"
-      - "PratikMahajan"
-      - "LalatenduMohanty"
+  - package-ecosystem: "gitsubmodule"
+    directory: "/graph-data.rs"
+    schedule:
+      interval: "monthly"
diff --git a/.gitmodules b/.gitmodules
new file mode 100644
index 000000000..ccf2dd554
--- /dev/null
+++ b/.gitmodules
@@ -0,0 +1,3 @@
+[submodule "graph-data.rs/cincinnati"]
+	path = graph-data.rs/cincinnati
+	url = https://github.com/openshift/cincinnati
diff --git a/graph-data.rs/Cargo.lock b/graph-data.rs/Cargo.lock
index 2043b5230..165062211 100644
--- a/graph-data.rs/Cargo.lock
+++ b/graph-data.rs/Cargo.lock
@@ -2096,9 +2096,9 @@ dependencies = [
 
 [[package]]
 name = "reqwest"
-version = "0.11.3"
+version = "0.11.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2296f2fac53979e8ccbc4a1136b25dcefd37be9ed7e4a1f6b05a6029c84ff124"
+checksum = "246e9f61b9bb77df069a947682be06e31ac43ea37862e244a69f177694ea6d22"
 dependencies = [
  "async-compression",
  "base64 0.13.0",
diff --git a/graph-data.rs/cincinnati b/graph-data.rs/cincinnati
new file mode 160000
index 000000000..7028cf5ae
--- /dev/null
+++ b/graph-data.rs/cincinnati
@@ -0,0 +1 @@
+Subproject commit 7028cf5aee1d08af2f8cb8fc4f9dbec80d5554b9