diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index fb7f2f1..0265e09 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -14,7 +14,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
+      - uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           cache-dependency-path: "./go.sum"
           check-latest: true
@@ -33,7 +33,7 @@ jobs:
         run: govulncheck ./...
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
+        uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
         continue-on-error: true
         with:
           token: ${{ secrets.CODECOV_TOKEN }}