diff --git a/.github/workflows/release-snapshot.yml b/.github/workflows/release-snapshot.yml
index 6401f87..7c36731 100644
--- a/.github/workflows/release-snapshot.yml
+++ b/.github/workflows/release-snapshot.yml
@@ -49,7 +49,7 @@ jobs:
           # merge-base of main.
           ref: ${{ github.event.pull_request.head.sha }}
 
-      - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version-file: specter/go.mod
           cache-dependency-path: specter/go.sum