diff --git a/substrate/.github/allowed-actions.js b/substrate/.github/allowed-actions.js
new file mode 100644
index 0000000000..4a8af91328
--- /dev/null
+++ b/substrate/.github/allowed-actions.js
@@ -0,0 +1,7 @@
+// This is a whitelist of GitHub Actions that are approved for use in this project.
+// If a new or existing workflow file is updated to use an action or action version
+// not listed here, CI will fail.
+
+module.exports = [
+    'gaurav-nelson/github-action-markdown-link-check@e3c371c731b2f494f856dc5de7f61cea4d519907', // gaurav-nelson/github-action-markdown-link-check@v1.0.8
+]
diff --git a/substrate/.github/workflows/md-link-check.yml b/substrate/.github/workflows/md-link-check.yml
index 75948534b3..e15a506c56 100644
--- a/substrate/.github/workflows/md-link-check.yml
+++ b/substrate/.github/workflows/md-link-check.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v2
-    - uses: gaurav-nelson/github-action-markdown-link-check@v1
+    - uses: gaurav-nelson/github-action-markdown-link-check@e3c371c731b2f494f856dc5de7f61cea4d519907
       with:
         use-quiet-mode: 'yes'
         config-file: '.github/workflows/mlc_config.json'
diff --git a/substrate/.github/workflows/mlc_config.json b/substrate/.github/workflows/mlc_config.json
index f741e987b1..ffd0a0319f 100644
--- a/substrate/.github/workflows/mlc_config.json
+++ b/substrate/.github/workflows/mlc_config.json
@@ -3,5 +3,11 @@
         {
             "pattern": "^https://crates.io"
         }
+    ],
+    "replacementPatterns": [
+        {
+          "pattern": "%20",
+          "replacement": " "
+        }
     ]
 }