diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3cb9e8e67..d05e2adc0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,3 +14,13 @@ updates:
           github-actions:
               patterns:
                   - '*'
+    - package-ecosystem: 'composer'
+      directory: '/vendor-bin/danger-php'
+      schedule:
+          interval: 'weekly'
+      cooldown:
+          default-days: 7
+      reviewers:
+          - 'shopware/product-cc-after-sales'
+      commit-message:
+          prefix: 'chore'
diff --git a/.github/workflows/integration.yaml b/.github/workflows/integration.yaml
index a6c3ae3df..5b93f94b2 100644
--- a/.github/workflows/integration.yaml
+++ b/.github/workflows/integration.yaml
@@ -20,16 +20,28 @@ jobs:
         name: Danger Check
         runs-on: ubuntu-latest
         if: github.event_name == 'pull_request'
+        permissions:
+            contents: read
+            pull-requests: write
         steps:
             - name: Checkout repository
               uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-            - name: Run Danger PHP
-              uses: docker://ghcr.io/shyim/danger-php:latest
+            - name: Setup PHP
+              uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
+              with:
+                  php-version: 8.2
+                  extensions: ctype, intl, mbstring
+                  coverage: none
+
+            - name: Install Danger
+              uses: ramsey/composer-install@65e4f84970763564f46a70b8a54b90d033b3bdda # v4.0.0
               with:
-                  args: ci
+                  working-directory: vendor-bin/danger-php
+
+            - name: Run Danger PHP
+              run: vendor-bin/danger-php/vendor/bin/danger ci
               env:
-                  GITHUB_REPOSITORY: ${{ github.repository }}
                   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                   GITHUB_PULL_REQUEST_ID: ${{ github.event.pull_request.number }}
 
diff --git a/vendor-bin/danger-php/composer.json b/vendor-bin/danger-php/composer.json
new file mode 100644
index 000000000..762d81e35
--- /dev/null
+++ b/vendor-bin/danger-php/composer.json
@@ -0,0 +1,11 @@
+{
+    "require-dev": {
+        "shyim/danger-php": "^0.3.15"
+    },
+    "config": {
+        "allow-plugins": {
+            "php-http/discovery": true
+        },
+        "sort-packages": true
+    }
+}