diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index faf3527..61fc2e4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -52,7 +52,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: open-cli-collective/.github/actions/go-lint@v1
+      - uses: open-cli-collective/.github/actions/go-lint@b816e09a862eec83f6ff334f94d6b96894f405ad
         with:
           go-version-file: go.mod
 
@@ -66,7 +66,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: go.mod
       - name: Static release build guard
diff --git a/.github/workflows/release-build-check.yml b/.github/workflows/release-build-check.yml
index a6f5ac0..623f5b1 100644
--- a/.github/workflows/release-build-check.yml
+++ b/.github/workflows/release-build-check.yml
@@ -33,7 +33,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: go.mod
 
diff --git a/.github/workflows/test-chocolatey.yml b/.github/workflows/test-chocolatey.yml
index a783afd..bc45863 100644
--- a/.github/workflows/test-chocolatey.yml
+++ b/.github/workflows/test-chocolatey.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: go.mod
 
diff --git a/go.mod b/go.mod
index 24e09fa..516821b 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/open-cli-collective/newrelic-cli
 
 go 1.26
 
-toolchain go1.26.10
+toolchain go1.27.4
 
 require (
 	github.com/byteness/keyring v1.11.0