diff --git a/.github/workflows/ccm-integration-tests.yml b/.github/workflows/ccm-integration-tests.yml
index f5acd7c..6e3883f 100644
--- a/.github/workflows/ccm-integration-tests.yml
+++ b/.github/workflows/ccm-integration-tests.yml
@@ -66,7 +66,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
+      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
         with:
           go-version: '${{ env.GO_VERSION }}'
 
@@ -166,7 +166,7 @@ jobs:
       - name: Validate hash
         run: 'shasum --check image.tar.sha256'
 
-      - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
+      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
         with:
           go-version: '${{ env.GO_VERSION }}'