diff --git a/.github/workflows/check-architectures.yaml b/.github/workflows/check-architectures.yaml
index f59630de..bad21984 100644
--- a/.github/workflows/check-architectures.yaml
+++ b/.github/workflows/check-architectures.yaml
@@ -62,7 +62,7 @@ jobs:
       - name: Save Comment ID
         if: ${{ steps.find.outputs.comment-id != '' }}
         run: echo ${{ steps.find.outputs.comment-id }} > ./pr/commentid
-      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+      - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
         with:
           name: pr
           path: pr/
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 320b9676..1fd9714e 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -34,11 +34,11 @@ jobs:
         with:
           path: registry-repo
       - name: Setup Go environment
-        uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
+        uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           go-version: 1.21
       - name: Set up QEMU # Enables arm64 image building
-        uses: docker/setup-qemu-action@b12b38b5fe75585e04f6aa3fd11fea2f4385ab7f 
+        uses: docker/setup-qemu-action@fcfabe005416080c2016468f7082c2a191cdeea3 
 
       - name: Check if devfile registry build is working
         run: bash registry-repo/.ci/build.sh && bash registry-repo/.ci/build.sh linux/arm64
diff --git a/.github/workflows/pushimge-next.yaml b/.github/workflows/pushimge-next.yaml
index 3bf58a5c..78f454f6 100644
--- a/.github/workflows/pushimge-next.yaml
+++ b/.github/workflows/pushimge-next.yaml
@@ -39,11 +39,11 @@ jobs:
         with:
           path: registry-repo
       - name: Setup Go environment
-        uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
+        uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           go-version: 1.21
       - name: Set up QEMU # Enables arm64 image building
-        uses: docker/setup-qemu-action@b12b38b5fe75585e04f6aa3fd11fea2f4385ab7f 
+        uses: docker/setup-qemu-action@fcfabe005416080c2016468f7082c2a191cdeea3 
       - name: Login to Quay
         uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
         with:
diff --git a/.github/workflows/validate-samples.yaml b/.github/workflows/validate-samples.yaml
index 4d361d58..4f77a419 100644
--- a/.github/workflows/validate-samples.yaml
+++ b/.github/workflows/validate-samples.yaml
@@ -42,7 +42,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install Go
-        uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
+        uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           go-version: "1.21"
 
diff --git a/.github/workflows/validate-stacks.yaml b/.github/workflows/validate-stacks.yaml
index 39f67694..6f31a2cf 100644
--- a/.github/workflows/validate-stacks.yaml
+++ b/.github/workflows/validate-stacks.yaml
@@ -44,7 +44,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install Go
-        uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
+        uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           go-version: "1.21"
 
@@ -159,7 +159,7 @@ jobs:
           start args: "--addons=ingress ${{ env.MINIKUBE_RESOURCES }}"
 
       - name: Install Go
-        uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
+        uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           go-version: "1.21"