diff --git a/.github/workflows/cue-validate.yaml b/.github/workflows/cue-validate.yaml
index 2c1d123..b449ba2 100644
--- a/.github/workflows/cue-validate.yaml
+++ b/.github/workflows/cue-validate.yaml
@@ -21,7 +21,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: cmd/go.mod
           check-latest: true
diff --git a/.github/workflows/golangci-lint.yaml b/.github/workflows/golangci-lint.yaml
index 714a168..3f56d39 100644
--- a/.github/workflows/golangci-lint.yaml
+++ b/.github/workflows/golangci-lint.yaml
@@ -21,7 +21,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: cmd/go.mod
           check-latest: true
diff --git a/.github/workflows/oscal-check.yaml b/.github/workflows/oscal-check.yaml
index 3a09f90..007d7fa 100644
--- a/.github/workflows/oscal-check.yaml
+++ b/.github/workflows/oscal-check.yaml
@@ -29,7 +29,7 @@ jobs:
             path: .build/go-oscal/
             persist-credentials: false
 
-      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         name: setup-go
         with:
           go-version-file: cmd/go.mod