diff --git a/.github/workflows/build-go-attest.yml b/.github/workflows/build-go-attest.yml
index c9b4eff..3993258 100644
--- a/.github/workflows/build-go-attest.yml
+++ b/.github/workflows/build-go-attest.yml
@@ -171,7 +171,7 @@ jobs:
 
       - name: Set up Node.js
         if: inputs.setup-node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version: ${{ inputs.node-version }}
 
diff --git a/.github/workflows/node-audit.yml b/.github/workflows/node-audit.yml
index 1a01a0e..fd9f4d2 100644
--- a/.github/workflows/node-audit.yml
+++ b/.github/workflows/node-audit.yml
@@ -96,13 +96,13 @@ jobs:
 
       - name: Setup Node (from version file)
         if: inputs.node-version-file != ''
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version-file: ${{ inputs.node-version-file }}
 
       - name: Setup Node (explicit version)
         if: inputs.node-version-file == ''
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version: ${{ inputs.node-version }}
 
diff --git a/.github/workflows/release-go-app.yml b/.github/workflows/release-go-app.yml
index def083b..6d985e7 100644
--- a/.github/workflows/release-go-app.yml
+++ b/.github/workflows/release-go-app.yml
@@ -367,7 +367,7 @@ jobs:
 
       - name: Set up Node.js
         if: inputs.setup-node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version: ${{ inputs.node-version }}