diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index 1b01df12..20430d01 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -15,7 +15,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@v3
         with:
-          go-version: 1.20.7
+          go-version: 1.20.10
       - uses: actions/checkout@v2
         with:
           fetch-depth: '0'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7373f193..d45df40d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.20.7
+          go-version: 1.20.10
       - name: Retrieve version
         run: |
           echo "TAG_NAME=$(echo ${{ github.ref }}  | grep -Eo 'v[0-9].*')" >> $GITHUB_OUTPUT
diff --git a/.github/workflows/test-gh.yml b/.github/workflows/test-gh.yml
index bc6e62ec..fbeaab8d 100644
--- a/.github/workflows/test-gh.yml
+++ b/.github/workflows/test-gh.yml
@@ -13,7 +13,7 @@ jobs:
     - name: Set up Go 1.x
       uses: actions/setup-go@v1
       with:
-        go-version: 1.20.7
+        go-version: 1.20.10
     - name: Check out code into the Go module directory
       uses: actions/checkout@v1
       with:
diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index 6a1b6da5..d4ddd4fb 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -10,7 +10,7 @@ jobs:
     with:
       repo: carvel-dev/vendir
       tool: vendir
-      goVersion: 1.20.7
+      goVersion: 1.20.10
     secrets:
       githubToken: ${{ secrets.GITHUB_TOKEN }}
       slackWebhookURL: ${{ secrets.SLACK_WEBHOOK_URL }}