diff --git a/.github/workflows/api-diff-lint.yaml b/.github/workflows/api-diff-lint.yaml
index 6f4b67c6ef..43e4fd1f07 100644
--- a/.github/workflows/api-diff-lint.yaml
+++ b/.github/workflows/api-diff-lint.yaml
@@ -13,7 +13,7 @@ jobs:
         with:
           fetch-depth: 0  # Fetch all history for all branches (needed for API diff)
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v6.4.0
         with:
           go-version-file: go.mod
 
diff --git a/.github/workflows/crd-diff.yaml b/.github/workflows/crd-diff.yaml
index 1855987c96..f00c558c1b 100644
--- a/.github/workflows/crd-diff.yaml
+++ b/.github/workflows/crd-diff.yaml
@@ -8,7 +8,7 @@ jobs:
       - uses: actions/checkout@v6.0.3
         with:
           fetch-depth: 0
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v6.4.0
         with:
           go-version-file: go.mod
       - name: Run make verify-crd-compatibility
diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index 73896c4df4..bf3134b73a 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -46,7 +46,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6.0.3
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v6.4.0
         with:
           go-version-file: go.mod
 
diff --git a/.github/workflows/go-apidiff.yaml b/.github/workflows/go-apidiff.yaml
index c3a6603e55..4e4753c4c8 100644
--- a/.github/workflows/go-apidiff.yaml
+++ b/.github/workflows/go-apidiff.yaml
@@ -11,7 +11,7 @@ jobs:
       with:
         fetch-depth: 0
 
-    - uses: actions/setup-go@v6
+    - uses: actions/setup-go@v6.4.0
       with:
         go-version-file: go.mod
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 8aab527772..b1e26f9a45 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -23,7 +23,7 @@ jobs:
         fetch-depth: 0
 
     - name: Install Go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v6.4.0
       with:
         go-version-file: "go.mod"
 
diff --git a/.github/workflows/sanity.yaml b/.github/workflows/sanity.yaml
index 068bcb1dea..74680f7834 100644
--- a/.github/workflows/sanity.yaml
+++ b/.github/workflows/sanity.yaml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6.0.3
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v6.4.0
         with:
           go-version-file: "go.mod"
       - name: Run verification checks
@@ -24,7 +24,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6.0.3
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v6.4.0
         with:
           go-version-file: "go.mod"
 
@@ -36,7 +36,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6.0.3
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v6.4.0
         with:
           go-version-file: "go.mod"
 
diff --git a/.github/workflows/test-regression.yaml b/.github/workflows/test-regression.yaml
index 6577790429..582b6e8dcf 100644
--- a/.github/workflows/test-regression.yaml
+++ b/.github/workflows/test-regression.yaml
@@ -15,7 +15,7 @@ jobs:
 
     - uses: actions/checkout@v6.0.3
 
-    - uses: actions/setup-go@v6
+    - uses: actions/setup-go@v6.4.0
       with:
         go-version-file: go.mod
 
diff --git a/.github/workflows/tilt.yaml b/.github/workflows/tilt.yaml
index 05e6a467eb..4238763d4d 100644
--- a/.github/workflows/tilt.yaml
+++ b/.github/workflows/tilt.yaml
@@ -21,7 +21,7 @@ jobs:
       with:
         path: operator-controller
     - name: Install Go
-      uses: actions/setup-go@v6
+      uses: actions/setup-go@v6.4.0
       with:
         go-version-file: "operator-controller/go.mod"
     - name: Install Tilt
diff --git a/.github/workflows/unit-test.yaml b/.github/workflows/unit-test.yaml
index 059040cc9a..92fc6b8568 100644
--- a/.github/workflows/unit-test.yaml
+++ b/.github/workflows/unit-test.yaml
@@ -15,7 +15,7 @@ jobs:
 
     - uses: actions/checkout@v6.0.3
 
-    - uses: actions/setup-go@v6
+    - uses: actions/setup-go@v6.4.0
       with:
         go-version-file: go.mod
 
diff --git a/.github/workflows/update-demos.yaml b/.github/workflows/update-demos.yaml
index ccbc0206de..1d12f99c02 100644
--- a/.github/workflows/update-demos.yaml
+++ b/.github/workflows/update-demos.yaml
@@ -25,7 +25,7 @@ jobs:
     steps:
       - run: sudo apt update && sudo apt install -y asciinema curl
       - uses: actions/checkout@v6.0.3
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v6.4.0
         with:
           go-version-file: "go.mod"
       - name: Run Demo Update