diff --git a/.github/workflows/clustertool.golangci-lint.yaml b/.github/workflows/clustertool.golangci-lint.yaml
index 46d16c7..187010c 100644
--- a/.github/workflows/clustertool.golangci-lint.yaml
+++ b/.github/workflows/clustertool.golangci-lint.yaml
@@ -28,7 +28,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Setup Go
-        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: stable
           cache: false
diff --git a/.github/workflows/clustertool.release.yaml b/.github/workflows/clustertool.release.yaml
index 487a8c8..162639b 100644
--- a/.github/workflows/clustertool.release.yaml
+++ b/.github/workflows/clustertool.release.yaml
@@ -13,7 +13,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           fetch-depth: 0
-      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: stable
           cache: true
diff --git a/.github/workflows/clustertool.tests.yaml b/.github/workflows/clustertool.tests.yaml
index a5e1f0b..849ea34 100644
--- a/.github/workflows/clustertool.tests.yaml
+++ b/.github/workflows/clustertool.tests.yaml
@@ -32,7 +32,7 @@ jobs:
     if: needs.check_changes.outputs.changes_detected == 'true'
     steps:
       # Toolchain + source setup
-      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: stable
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
diff --git a/.github/workflows/go-mod-tidy.yaml b/.github/workflows/go-mod-tidy.yaml
index 6839b0d..090cde5 100644
--- a/.github/workflows/go-mod-tidy.yaml
+++ b/.github/workflows/go-mod-tidy.yaml
@@ -26,7 +26,7 @@ jobs:
         #   token: ${{ secrets.OR_PAT }}
         #   fetch-depth: 1
 
-      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
+      - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: stable
           cache: true