diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 44c2925716..caee5d5e39 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -40,7 +40,7 @@ jobs:
         with:
           persist-credentials: false
       - name: setup-go
-        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # tag=v3.2.1
+        uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # tag=v3.2.1
         with:
           go-version: '1.21'
       - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
@@ -73,7 +73,7 @@ jobs:
         with:
           persist-credentials: false
       - name: setup-go
-        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # tag=v3.2.1
+        uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # tag=v3.2.1
         with:
           go-version: '1.21'
       - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
@@ -96,7 +96,7 @@ jobs:
         with:
           persist-credentials: false
       - name: setup-go
-        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # tag=v3.2.1
+        uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # tag=v3.2.1
         with:
           go-version: '1.21'
       - name: Install atlas
@@ -116,7 +116,7 @@ jobs:
         with:
           persist-credentials: false
       - name: setup-go
-        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # tag=v5.2.0
+        uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # tag=v5.3.0
         with:
           go-version: '1.21'
       - name: Install atlas
@@ -154,7 +154,7 @@ jobs:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       with:
         persist-credentials: false
-    - uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a
+    - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34
       with:
         go-version: '~1.21'
     - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b
@@ -242,7 +242,7 @@ jobs:
         with:
           persist-credentials: false
       - name: setup-go
-        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # tag=v3.2.1
+        uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # tag=v3.2.1
         with:
           go-version: '1.21'
       - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
diff --git a/.github/workflows/postmerge.yaml b/.github/workflows/postmerge.yaml
index 824ea42373..83b5c10666 100644
--- a/.github/workflows/postmerge.yaml
+++ b/.github/workflows/postmerge.yaml
@@ -30,7 +30,7 @@ jobs:
         with:
           persist-credentials: false
       - name: setup-go
-        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # tag=v3.2.1
+        uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # tag=v3.2.1
         with:
           go-version: '1.21'
       - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 52b100b9eb..7577952277 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -50,7 +50,7 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Set up Go
-        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
+        uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           go-version: "1.21"
       - name: Install cosign
diff --git a/.github/workflows/reusable-local-build.yaml b/.github/workflows/reusable-local-build.yaml
index 8163e54ef5..d8efba815a 100644
--- a/.github/workflows/reusable-local-build.yaml
+++ b/.github/workflows/reusable-local-build.yaml
@@ -37,7 +37,7 @@ jobs:
           repository: ${{ inputs.repository }}
           ref: ${{ inputs.ref }}
       - name: Set up Go
-        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
+        uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           go-version: 'stable'
       - name: Install GoReleaser