diff --git a/.github/actions/cancel-workflow-runs b/.github/actions/cancel-workflow-runs
new file mode 160000
index 000000000000..953e057dc81d
--- /dev/null
+++ b/.github/actions/cancel-workflow-runs
@@ -0,0 +1 @@
+Subproject commit 953e057dc81d3458935a18d1184c386b0f6b5738
diff --git a/.github/actions/github-push-action b/.github/actions/github-push-action
new file mode 160000
index 000000000000..057a6ba835d9
--- /dev/null
+++ b/.github/actions/github-push-action
@@ -0,0 +1 @@
+Subproject commit 057a6ba835d986bfe495dd476a6c4db1d5f9503c
diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml
index b81c5e60165d..8dff63936866 100644
--- a/.github/workflows/build_wheels.yml
+++ b/.github/workflows/build_wheels.yml
@@ -249,14 +249,17 @@ jobs:
     if: github.repository_owner == 'apache' && github.event_name == 'schedule'
     steps:
       - name: Checkout code on master branch
-        uses: actions/checkout@master
+        uses: actions/checkout@v2
+        with:
+          persist-credentials: false
+          submodules: recursive
       - name: Tag commit
         run: |
           BRANCH_NAME=${GITHUB_REF##*/}
           echo "Tagging ${BRANCH_NAME}"
           git tag -f nightly-${BRANCH_NAME} HEAD
       - name: Push tags
-        uses: apache/airflow-github-push-action@b007e7b818e33b04afd056e4c4b57ba917145d7a
+        uses: ./.github/actions/github-push-action
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           tags: true
diff --git a/.github/workflows/cancel.yml b/.github/workflows/cancel.yml
index a20d36e29bec..ea46ebf89d36 100644
--- a/.github/workflows/cancel.yml
+++ b/.github/workflows/cancel.yml
@@ -30,7 +30,12 @@ jobs:
     name: "Cancel duplicate workflow runs"
     runs-on: ubuntu-latest
     steps:
-      - uses: apache/airflow-cancel-workflow-runs@953e057dc81d3458935a18d1184c386b0f6b5738
+      - name: "Checkout ${{ github.ref }} ( ${{ github.sha }} )"
+        uses: actions/checkout@v2
+        with:
+          persist-credentials: false
+          submodules: recursive
+      - uses: ./.github/actions/cancel-workflow-runs
         name: "Cancel duplicate workflow runs"
         with:
           cancelMode: duplicates
diff --git a/.gitmodules b/.gitmodules
index 5abfbe7da83e..3a6406c405f3 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,3 +1,9 @@
 [submodule "website/www/site/themes/docsy"]
 	path = website/www/site/themes/docsy
 	url = https://github.com/google/docsy.git
+[submodule ".github/actions/cancel-workflow-runs"]
+	path = .github/actions/cancel-workflow-runs
+	url = https://github.com/potiuk/cancel-workflow-runs
+[submodule ".github/actions/github-push-action"]
+	path = .github/actions/github-push-action
+	url = https://github.com/ad-m/github-push-action