diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index 9559c4fde9..80637ab009 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -46,7 +46,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v4.0.1
         with:
           go-version: 1.19
       - uses: actions/checkout@v3.1.0
diff --git a/.github/workflows/gh-pages.yaml b/.github/workflows/gh-pages.yaml
index c3fce6b8bc..89df548ebd 100644
--- a/.github/workflows/gh-pages.yaml
+++ b/.github/workflows/gh-pages.yaml
@@ -24,7 +24,7 @@ jobs:
         with:
           python-version: 3.x
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v4.0.1
         with:
           go-version: 1.19
       - name: build
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 26ff28b01c..87d385a9d6 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v4.0.1
         with:
           go-version: ${{ env.GOLANG_VERSION }}
       - name: Checkout code
@@ -51,7 +51,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v4.0.1
         with:
           go-version: ${{ env.GOLANG_VERSION }}
         id: go
@@ -103,7 +103,7 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3.1.0
       - name: Setup Golang
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v4.0.1
         with:
           go-version: ${{ env.GOLANG_VERSION }}
       # k8s codegen generates files into GOPATH location instead of the GitHub git checkout location
diff --git a/.github/workflows/image-reuse.yaml b/.github/workflows/image-reuse.yaml
index f2171f099f..5a091da3a5 100644
--- a/.github/workflows/image-reuse.yaml
+++ b/.github/workflows/image-reuse.yaml
@@ -69,7 +69,7 @@ jobs:
         if: ${{ github.ref_type != 'tag'}}
 
       - name: Setup Golang
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
+        uses: actions/setup-go@v4.0.1 # v3.5.0
         with:
           go-version: ${{ inputs.go-version }}
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 8afadbcc11..2bac1b57af 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -118,7 +118,7 @@ jobs:
           ref: ${{ github.event.inputs.tag }}
 
       - name: Setup Golang
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v4.0.1
         with:
           go-version: 1.19