diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 87dc5c0..63187cb 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -19,7 +19,7 @@ jobs:
           persist-credentials: false
 
       - name: Install Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version: '1.22'
 
@@ -39,7 +39,7 @@ jobs:
 
       - name: Install Go ${{ matrix.go }}
         if: matrix.go != 'tip'
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version: ${{ matrix.go }}
 
@@ -57,7 +57,7 @@ jobs:
 
       - name: Install Go stable
         if: matrix.go == 'tip'
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version: 1.x
 
diff --git a/.github/workflows/gotip_cron_test.yml b/.github/workflows/gotip_cron_test.yml
index 2b27dad..05a7987 100644
--- a/.github/workflows/gotip_cron_test.yml
+++ b/.github/workflows/gotip_cron_test.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Install Go stable
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version: 1.x
       - name: Install Go tip