diff --git a/.github/workflows/ci-locale.yml b/.github/workflows/ci-locale.yml
index e55e1c3a..751cd169 100644
--- a/.github/workflows/ci-locale.yml
+++ b/.github/workflows/ci-locale.yml
@@ -26,7 +26,7 @@ jobs:
       with:
         persist-credentials: false
     - name: Install Go
-      uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
       with:
         go-version: ${{ matrix.go-version }}
         cache: true
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fbacadb7..aa228ef9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ jobs:
       with:
         persist-credentials: false
     - name: Install Go
-      uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
       with:
         go-version: ${{ matrix.go-version }}
         cache: true
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 1872c5f4..98aae5fe 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -19,7 +19,7 @@ jobs:
       with:
         persist-credentials: false
     - name: Install Go
-      uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
       with:
         go-version: 1.26
         cache: true
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index a6cc18b3..9e5e55a7 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -11,7 +11,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
         with:
           persist-credentials: false
-      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
         with:
           go-version: '1.26'
           cache: true
diff --git a/.github/workflows/gittuf-verify.yml b/.github/workflows/gittuf-verify.yml
index 909397bc..c15f66c3 100644
--- a/.github/workflows/gittuf-verify.yml
+++ b/.github/workflows/gittuf-verify.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Install gittuf
-        uses: gittuf/gittuf-installer@b31d2ba4f494f30fbc44371da67ad87cca6569f9
+        uses: gittuf/gittuf-installer@a9730b348241599ca1882a8844acb43cd7935bb7
       - name: Checkout and verify repository
         run: |
           sleep 10s
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 6ee07620..2939be5f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
         with:
           persist-credentials: false
-      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
         with:
           go-version: '1.26'
           cache: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0b168284..d3178574 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
         with:
           fetch-depth: 0 # fetch full history for previous tag information
           persist-credentials: false
-      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
         with:
           go-version: '1.26'
           cache: true
diff --git a/.github/workflows/run-demo.yml b/.github/workflows/run-demo.yml
index 5275fe7f..d168c2e3 100644
--- a/.github/workflows/run-demo.yml
+++ b/.github/workflows/run-demo.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Install Go
-        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
         with:
           go-version: '1.26'
       - name: Build gittuf