diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ef146a1..c05bfa4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
           path: lattice-node-agent
       - uses: actions/setup-go@v6
         with:
-          go-version: '1.26.9'
+          go-version: '1.26.10'
           check-latest: true
           cache: false
       - name: gofmt
@@ -39,10 +39,10 @@ jobs:
         run: go test -race -cover ./...
       - name: gosec
         run: |
-          go install github.com/securego/gosec/v2/cmd/gosec@latest
+          go install github.com/securego/gosec/v2/cmd/gosec@v2.29.0
           gosec ./lattice-node-agent/...
       - name: govulncheck
         working-directory: lattice-node-agent
         run: |
-          go install golang.org/x/vuln/cmd/govulncheck@latest
+          go install golang.org/x/vuln/cmd/govulncheck@v1.9.0
           govulncheck ./...
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 500a777..29c95f5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -48,7 +48,7 @@ jobs:
           path: lattice-node-agent
       - uses: actions/setup-go@v6
         with:
-          go-version: "1.26.9"
+          go-version: "1.26.10"
           check-latest: true
           cache: false
       - name: build binary