diff --git a/.github/workflows/build-go-attest.yml b/.github/workflows/build-go-attest.yml
index 3993258..f374dde 100644
--- a/.github/workflows/build-go-attest.yml
+++ b/.github/workflows/build-go-attest.yml
@@ -171,7 +171,7 @@ jobs:
 
       - name: Set up Node.js
         if: inputs.setup-node
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node-version }}
 
diff --git a/.github/workflows/node-audit.yml b/.github/workflows/node-audit.yml
index fd9f4d2..75fb811 100644
--- a/.github/workflows/node-audit.yml
+++ b/.github/workflows/node-audit.yml
@@ -96,13 +96,13 @@ jobs:
 
       - name: Setup Node (from version file)
         if: inputs.node-version-file != ''
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version-file: ${{ inputs.node-version-file }}
 
       - name: Setup Node (explicit version)
         if: inputs.node-version-file == ''
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node-version }}
 
diff --git a/.github/workflows/release-go-app.yml b/.github/workflows/release-go-app.yml
index 6d985e7..2f9d6ca 100644
--- a/.github/workflows/release-go-app.yml
+++ b/.github/workflows/release-go-app.yml
@@ -367,7 +367,7 @@ jobs:
 
       - name: Set up Node.js
         if: inputs.setup-node
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: ${{ inputs.node-version }}