diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 0851ff5007..9bebb0e790 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -62,7 +62,7 @@ jobs:
     - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       with:
         persist-credentials: false
-    - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
+    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v6.5.0
       with:
         go-version-file: "go.mod"
     - name: build
@@ -80,7 +80,7 @@ jobs:
       with:
         fetch-depth: 0
         persist-credentials: false
-    - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
+    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v6.5.0
       with:
         go-version-file: "go.mod"
     - name: gofmt
@@ -115,7 +115,7 @@ jobs:
     - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       with:
         persist-credentials: false
-    - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
+    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v6.5.0
       with:
         go-version-file: "go.mod"
     - name: unit-test
diff --git a/.github/workflows/dependabot-regen.yml b/.github/workflows/dependabot-regen.yml
index c8137dab23..071bf7ab31 100644
--- a/.github/workflows/dependabot-regen.yml
+++ b/.github/workflows/dependabot-regen.yml
@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v6.5.0
         with:
           go-version-file: 'go.mod'
 
diff --git a/.github/workflows/go-coverage.yml b/.github/workflows/go-coverage.yml
index 0e1a8b249d..496d75a31b 100644
--- a/.github/workflows/go-coverage.yml
+++ b/.github/workflows/go-coverage.yml
@@ -41,7 +41,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v6.5.0
         with:
           go-version-file: "${{ github.workspace }}/src/github.com/tektoncd/chains/go.mod"
 
diff --git a/.github/workflows/goclean.yml b/.github/workflows/goclean.yml
index 2890369abc..c499fde5f0 100644
--- a/.github/workflows/goclean.yml
+++ b/.github/workflows/goclean.yml
@@ -32,7 +32,7 @@ jobs:
         persist-credentials: false
 
     - name: Setup Go
-      uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
+      uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v6.5.0
       with:
         go-version-file: "go.mod"
         cache: false
diff --git a/.github/workflows/reusable-e2e.yaml b/.github/workflows/reusable-e2e.yaml
index e49ea6c40a..036fb514d8 100644
--- a/.github/workflows/reusable-e2e.yaml
+++ b/.github/workflows/reusable-e2e.yaml
@@ -40,7 +40,7 @@ jobs:
         persist-credentials: false
 
     - name: Set up Go
-      uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
+      uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v6.5.0
       with:
         go-version-file: "go.mod"
 
diff --git a/.github/workflows/test-on-microshift.yaml b/.github/workflows/test-on-microshift.yaml
index 3e6b21e899..769dc0c057 100644
--- a/.github/workflows/test-on-microshift.yaml
+++ b/.github/workflows/test-on-microshift.yaml
@@ -35,7 +35,7 @@ jobs:
     - uses: imjasonh/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d  # v0.9
 
     - name: Set up Go
-      uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c  # v6.4.0
+      uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v6.5.0
       with:
         cache-dependency-path: "${{ github.workspace }}/src/github.com/tektoncd/chains/go.sum"
         go-version-file: "${{ github.workspace }}/src/github.com/tektoncd/chains/go.mod"