diff --git a/.github/workflows/dummy.yml b/.github/workflows/dummy.yml
index 4d2daf7f..c0a6d99b 100644
--- a/.github/workflows/dummy.yml
+++ b/.github/workflows/dummy.yml
@@ -41,6 +41,8 @@ jobs:
         if: false
       - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4  # v4.3.1
         if: false
+      - uses: bazel-contrib/setup-bazel@8d2cb86a3680a820c3e219597279ce3f80d17a47  # v0.15.0
+        if: false
       - uses: betahuhn/repo-file-sync-action@8b92be3375cf1d1b0cd579af488a9255572e4619  # v1.21.1
         if: false
       - uses: browser-actions/setup-firefox@5914774dda97099441f02628f8d46411fcfbd208  # v1.7.0
diff --git a/actions.yml b/actions.yml
index 6596ab0e..0e8cac84 100644
--- a/actions.yml
+++ b/actions.yml
@@ -163,6 +163,10 @@ aws-actions/configure-aws-credentials:
 azure/setup-helm:
   1a275c3b69536ee54be43f2070a358922e12c8d4:
     tag: v4.3.1
+bazel-contrib/setup-bazel:
+  '*':
+    expires_at: 2026-12-21
+    keep: true
 betahuhn/repo-file-sync-action:
   8b92be3375cf1d1b0cd579af488a9255572e4619:
     tag: v1.21.1
diff --git a/approved_patterns.yml b/approved_patterns.yml
index 4f73b1b7..940196b2 100644
--- a/approved_patterns.yml
+++ b/approved_patterns.yml
@@ -45,6 +45,7 @@
 - aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838
 - aws-actions/configure-aws-credentials@00943011d9042930efac3dcd3a170e4273319bc8
 - azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4
+- bazel-contrib/setup-bazel@*
 - betahuhn/repo-file-sync-action@8b92be3375cf1d1b0cd579af488a9255572e4619
 - browser-actions/setup-firefox@5914774dda97099441f02628f8d46411fcfbd208
 - browser-actions/setup-geckodriver@5ef1526ed36211ab6cb531ec1cfb11f924ca2dee