diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..36e6f2e90f
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,23 @@
+---
+
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /docker
+    schedule:
+      interval: weekly
+      day: sunday
+    open-pull-requests-limit: 99
+    commit-message:
+      prefix: pip-docker
+    labels:
+      - pip dependencies
+    groups:
+      autoweb:
+        patterns:
+          - '*'
+
+  - package-ecosystem: docker
+    directory: /docker
+    schedule:
+      interval: weekly
diff --git a/docker/Dockerfile.sentry b/docker/Dockerfile.sentry
index d1fc8de8bc..262e5c351e 100644
--- a/docker/Dockerfile.sentry
+++ b/docker/Dockerfile.sentry
@@ -3,12 +3,13 @@ ARG SENTRY_IMAGE=getsentry/sentry:${SENTRY_VERSION}
 ARG APPLICATION=sentry-hh=24.7.1-1
 FROM ${SENTRY_IMAGE}
 
+COPY docker/requirements-extra.txt /tmp/
 RUN set -xe && \
     echo 'debconf debconf/frontend select noninteractive' | debconf-set-selections && \
     apt-get update -qq && \
     apt-get install -qq -y --no-install-recommends build-essential libsasl2-dev libldap2-dev libssl-dev && \
     cd /tmp && \
-    pip install --no-cache-dir --prefer-binary sentry-auth-ldap==23.6.0 django-redis==5.4.0 && \
+    pip install --no-cache-dir --prefer-binary -r /tmp/requirements-extra.txt && \
     apt-mark manual $(dpkg-query --show -f '${Package} ' 'libsasl2*' 'libldap*' 'libssl*') && \
     apt-mark auto build-essential $(dpkg-query --show -f '${Package} ' '*-dev') && \
     apt-get autoremove -qq -y --purge && \
diff --git a/docker/requirements-extra.txt b/docker/requirements-extra.txt
new file mode 100644
index 0000000000..b9a60a573d
--- /dev/null
+++ b/docker/requirements-extra.txt
@@ -0,0 +1,3 @@
+sentry-auth-ldap==23.6.0
+django-redis==5.4.0
+django-cassandra-engine==1.9.0