diff --git a/.github/workflows/go.yaml b/.github/workflows/go.yaml
index 8cc6526..4fa9f0c 100644
--- a/.github/workflows/go.yaml
+++ b/.github/workflows/go.yaml
@@ -18,14 +18,14 @@ jobs:
           - "1.18"
     steps:
     - name: Harden the runner (Audit all outbound calls)
-      uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
+      uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
       with:
         egress-policy: audit
 
     - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
     - name: Set up Go
-      uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
+      uses: actions/setup-go@be3c94b385c4f180051c996d336f57a34c397495 # v3.6.1
       with:
         go-version: ${{ matrix.go }}