diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 16c90dd51..8c7646871 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -132,7 +132,7 @@ jobs:
           node-version: "22.x"
           cache: "npm"
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version: "^1.21.6"
 
diff --git a/.github/workflows/test-and-release.yaml b/.github/workflows/test-and-release.yaml
index 21f488281..86b032c84 100644
--- a/.github/workflows/test-and-release.yaml
+++ b/.github/workflows/test-and-release.yaml
@@ -192,7 +192,7 @@ jobs:
           node-version: "22.x"
           cache: "npm"
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version: "^1.21.6"