diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2d5b4a6..ecfa908 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,7 +17,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.22.2
+          go-version: 1.22.3
       - name: Cache Go modules
         uses: actions/cache@v4
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1135732..132bbbc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.22.2
+          go-version: 1.22.3
       - name: Cache Go modules
         uses: actions/cache@v4
         with:
diff --git a/pkg/executors/golang/compile/compile.go b/pkg/executors/golang/compile/compile.go
index 1f8dd28..66bd06f 100644
--- a/pkg/executors/golang/compile/compile.go
+++ b/pkg/executors/golang/compile/compile.go
@@ -228,7 +228,7 @@ func goInstalled() bool {
 func getGolangImage() string {
 	const (
 		// renovate: datasource=docker depName=golang
-		golangImageVersion = "1.22.2-alpine"
+		golangImageVersion = "1.22.3-alpine"
 	)
 
 	golangImage := fmt.Sprintf("golang:%s", golangImageVersion)