diff --git a/.github/workflows/build-images.yml b/.github/workflows/build-images.yml
index 750c103e..f14b10b5 100644
--- a/.github/workflows/build-images.yml
+++ b/.github/workflows/build-images.yml
@@ -17,7 +17,7 @@ jobs:
       uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
     - name: setup-go
-      uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+      uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         go-version: '1.21.0'
 
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ada59565..638aa261 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-    - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+    - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         go-version: '1.21.0'
     - name: Install libpcap-dev
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 37f8f5f8..b4d41542 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -37,7 +37,7 @@ jobs:
       uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
     - name: setup-go
-      uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+      uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         go-version: '1.21.0'
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index cf74a238..0eb2b053 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-    - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+    - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         go-version: '1.21.0'
     - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-    - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+    - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         go-version: '1.21.0'
     - name: golangci-lint
diff --git a/sandboxes/README.md b/sandboxes/README.md
index b14c6dc9..465f5f33 100644
--- a/sandboxes/README.md
+++ b/sandboxes/README.md
@@ -2,7 +2,7 @@
 
 ## Sandbox Image Testing
 
-By default the analysis command will update the sandbox images from the grc.io
+By default, the analysis command will update the sandbox images from the grc.io
 repository. To test local changes to sandboxes, they need to be built locally,
 and the analysis needs to redirect its container source to the local filesystem.
 
@@ -34,7 +34,7 @@ These commands will (re-)build both sandboxes and copy them to the correct locat
 ### Running the analysis
 
 The `scripts/run_analysis.sh` script automates much of the setup for running
-local analysis, but it the default setting will pull the sandbox images from
+local analysis, but the default setting will pull the sandbox images from
 the remote container registry rather than using locally built ones. To change
 this, add the `-nopull` option to the script.
 
@@ -108,8 +108,7 @@ $ pip install django==9.3.4
 
 ##### import
 
-Iterates through the installed package's modules, etc and attempts to import
-them.
+Iterates through the installed package's modules and attempts to import them.
 
 This is relevant to languages that execute code at import time.