diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6460051dc..809259436 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,8 +4,7 @@ updates:
     directory: "/graph-data.rs"
     schedule:
       interval: "daily"
-    reviewers:
-      - "wking"
-      - "vrutkovs"
-      - "PratikMahajan"
-      - "LalatenduMohanty"
+  - package-ecosystem: "gitsubmodule"
+    directory: "/graph-data.rs"
+    schedule:
+      interval: "monthly"
diff --git a/.gitmodules b/.gitmodules
new file mode 100644
index 000000000..ccf2dd554
--- /dev/null
+++ b/.gitmodules
@@ -0,0 +1,3 @@
+[submodule "graph-data.rs/cincinnati"]
+	path = graph-data.rs/cincinnati
+	url = https://github.com/openshift/cincinnati
diff --git a/graph-data.rs/Cargo.lock b/graph-data.rs/Cargo.lock
index 2043b5230..9db23a7b9 100644
--- a/graph-data.rs/Cargo.lock
+++ b/graph-data.rs/Cargo.lock
@@ -2726,9 +2726,9 @@ checksum = "cda74da7e1a664f795bb1f8a87ec406fb89a02522cf6e50620d016add6dbbf5c"
 
 [[package]]
 name = "tokio"
-version = "1.7.0"
+version = "1.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c79ba603c337335df6ba6dd6afc38c38a7d5e1b0c871678439ea973cd62a118e"
+checksum = "5fb2ed024293bb19f7a5dc54fe83bf86532a44c12a2bb8ba40d64a4509395ca2"
 dependencies = [
  "autocfg 1.0.1",
  "bytes",
diff --git a/graph-data.rs/cincinnati b/graph-data.rs/cincinnati
new file mode 160000
index 000000000..7028cf5ae
--- /dev/null
+++ b/graph-data.rs/cincinnati
@@ -0,0 +1 @@
+Subproject commit 7028cf5aee1d08af2f8cb8fc4f9dbec80d5554b9