diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c535ca939..196a7bfa3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -162,7 +162,7 @@ jobs:
         if: github.event_name != 'pull_request' || github.event.action != 'closed'
         run: bash "${GITHUB_WORKSPACE}/scripts/get_go_version.sh"
       - name: Set up Go
-        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
         if: github.event_name != 'pull_request' || github.event.action != 'closed'
         with:
           go-version: ${{steps.get_go_version.outputs.go_version}}
diff --git a/.github/workflows/resource-update.yml b/.github/workflows/resource-update.yml
index 48d210ba7..77d866d2a 100644
--- a/.github/workflows/resource-update.yml
+++ b/.github/workflows/resource-update.yml
@@ -48,7 +48,7 @@ jobs:
         run: bash "${GITHUB_WORKSPACE}/scripts/get_go_version.sh"
       - name: Set up Go
         if: github.event_name != 'pull_request' || github.event.action != 'closed'
-        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
         with:
           go-version: ${{steps.get_go_version.outputs.go_version}}
       - name: go mod update