diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b96e4615b..14de0971d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -163,7 +163,7 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Setup Go
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: ${{ env.GO_VERSION }}
           cache-dependency-path: synkronus/go.sum
@@ -215,7 +215,7 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Setup Go
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: ${{ env.GO_VERSION }}
           cache-dependency-path: synkronus-cli/go.sum
diff --git a/.github/workflows/e2e-attachments.yml b/.github/workflows/e2e-attachments.yml
index 12fae07f6..cae6df31b 100644
--- a/.github/workflows/e2e-attachments.yml
+++ b/.github/workflows/e2e-attachments.yml
@@ -35,7 +35,7 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Set up Go
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version-file: synkronus/go.mod
           cache: true
diff --git a/.github/workflows/sbom-release.yml b/.github/workflows/sbom-release.yml
index 3208400c7..724c3c5bd 100644
--- a/.github/workflows/sbom-release.yml
+++ b/.github/workflows/sbom-release.yml
@@ -46,7 +46,7 @@ jobs:
             desktop/pnpm-lock.yaml
 
       - name: Set up Go
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: ${{ env.GO_VERSION }}
 
diff --git a/.github/workflows/synkronus-cli-docker.yml b/.github/workflows/synkronus-cli-docker.yml
index 9326eb829..1d7c9e20c 100644
--- a/.github/workflows/synkronus-cli-docker.yml
+++ b/.github/workflows/synkronus-cli-docker.yml
@@ -53,7 +53,7 @@ jobs:
           echo "Building synkronus-cli with version: ${VERSION}"
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: '1.25.x'
           cache-dependency-path: synkronus-cli/go.sum
diff --git a/.github/workflows/synkronus-cli.yml b/.github/workflows/synkronus-cli.yml
index cab62c3f8..a5856dfb8 100644
--- a/.github/workflows/synkronus-cli.yml
+++ b/.github/workflows/synkronus-cli.yml
@@ -37,7 +37,7 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Set up Go
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: '1.25.x'
           cache-dependency-path: synkronus-cli/go.sum
@@ -87,7 +87,7 @@ jobs:
         uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
 
       - name: Set up Go
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: '1.25.x'
           cache-dependency-path: synkronus-cli/go.sum
diff --git a/.github/workflows/synkronus-docker.yml b/.github/workflows/synkronus-docker.yml
index 8226b965b..5c434d238 100644
--- a/.github/workflows/synkronus-docker.yml
+++ b/.github/workflows/synkronus-docker.yml
@@ -63,7 +63,7 @@ jobs:
           echo "Building Synkronus with version: ${VERSION}"
 
       - name: Set up Go
-        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           go-version: '1.25.x'
           cache-dependency-path: synkronus/go.sum