diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ca665e6..94a217b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.0.0
       - name: Check license headers
         uses: apache/skywalking-eyes@v0.2.0
         with:
@@ -25,9 +25,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.0.0
+      - name: Setup Go
+        uses: actions/setup-go@v3.0.0
+        with:
+          go-version: "1.17"
+          check-latest: true
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@v2
+        uses: golangci/golangci-lint-action@v3.1.0
         with:
           version: latest
 
@@ -37,14 +42,15 @@ jobs:
     strategy:
       matrix:
         go:
-          - "^1.15"
-          - "^1.16"
-          - "^1.17"
+          - "1.15"
+          - "1.16"
+          - "1.17"
     steps:
       - name: Setup Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3.0.0
         with:
           go-version: ${{ matrix.go }}
+          check-latest: true
       - name: Setup CycloneDX CLI
         run: |
           mkdir -p "$HOME/.local/bin"
@@ -53,6 +59,6 @@ jobs:
           echo "ae39404a9dc8b2e7be0a9559781ee9fe3492201d2629de139d702fd4535ffdd6 $HOME/.local/bin/cyclonedx" | sha256sum -c
           chmod +x "$HOME/.local/bin/cyclonedx"
       - name: Checkout Repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.0.0
       - name: Test
         run: make test
diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index 45f9ab9..3a89868 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -10,13 +10,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3.0.0
         with:
           fetch-depth: 0
       - name: Setup Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3.0.0
         with:
-          go-version: 1.16
+          go-version: "1.17"
+          check-latest: true
       - name: Generate SBOM
         uses: CycloneDX/gh-gomod-generate-sbom@v1
         with: