diff --git a/.github/workflows/c2-reconciler-canary.yml b/.github/workflows/c2-reconciler-canary.yml
index d4e69bb5..f9c3f251 100644
--- a/.github/workflows/c2-reconciler-canary.yml
+++ b/.github/workflows/c2-reconciler-canary.yml
@@ -38,7 +38,7 @@ jobs:
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
 
-      - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff  # v5
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
         with:
           go-version-file: go.mod
 
diff --git a/.github/workflows/c6-engine-wiring-canary.yml b/.github/workflows/c6-engine-wiring-canary.yml
index f79579cb..fdbb285e 100644
--- a/.github/workflows/c6-engine-wiring-canary.yml
+++ b/.github/workflows/c6-engine-wiring-canary.yml
@@ -44,7 +44,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 
diff --git a/.github/workflows/cpu-substrate-canary.yml b/.github/workflows/cpu-substrate-canary.yml
index bf9df804..7038629e 100644
--- a/.github/workflows/cpu-substrate-canary.yml
+++ b/.github/workflows/cpu-substrate-canary.yml
@@ -34,7 +34,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 
diff --git a/.github/workflows/default-install-smoke.yml b/.github/workflows/default-install-smoke.yml
index 27b3b4a5..97cd7884 100644
--- a/.github/workflows/default-install-smoke.yml
+++ b/.github/workflows/default-install-smoke.yml
@@ -51,7 +51,7 @@ jobs:
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # v4
 
-      - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff  # v5
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
         with:
           go-version-file: go.mod