diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 7f2c49f..edeafc4 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -3,12 +3,12 @@ name: 'test'
 on:
   push:
     branches:
-    - 'main'
+      - 'main'
     tags:
-    - '*'
+      - '*'
   pull_request:
     branches:
-    - 'main'
+      - 'main'
   workflow_dispatch:
 
 jobs:
@@ -16,10 +16,10 @@ jobs:
     runs-on: 'ubuntu-latest'
 
     steps:
-    - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11' # ratchet:actions/checkout@v4
 
-    - uses: 'actions/setup-go@v4'
-      with:
-        go-version: '1.21'
+      - uses: 'actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491' # ratchet:actions/setup-go@v5
+        with:
+          go-version-file: 'go.mod'
 
-    - run: 'make test'
+      - run: 'make test'
diff --git a/go.mod b/go.mod
index 0d70ae4..ea554fa 100644
--- a/go.mod
+++ b/go.mod
@@ -1,5 +1,7 @@
 module github.com/sethvargo/go-envconfig
 
-go 1.21
+go 1.22
+
+toolchain go1.22.1
 
 require github.com/google/go-cmp v0.6.0