diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5f8503f0a..94d0be376 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -24,10 +24,17 @@ permissions:
 jobs:
   govulncheck:
     uses: caarlos0/meta/.github/workflows/govulncheck.yml@main
+    with:
+      cache: true
+      go-version: '>=1.19.1'
   semgrep:
     uses: caarlos0/meta/.github/workflows/semgrep.yml@main
   ruleguard:
     uses: caarlos0/meta/.github/workflows/ruleguard.yml@main
+    with:
+      cache: true
+      go-version: '>=1.19.1'
+      args: '-disable largeloopcopy'
   test:
     runs-on: ubuntu-latest
     env:
@@ -51,7 +58,7 @@ jobs:
           mkdir -p $HOME/.cache/snapcraft/stage-packages
       - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # v3
         with:
-          go-version: '1.19'
+          go-version: '>=1.19.1'
           cache: true
       - uses: sigstore/cosign-installer@v2.6.0
       - uses: anchore/sbom-action/download-syft@v0.12.0
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index ddfc673b5..b96a725bd 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -23,7 +23,7 @@ jobs:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # v3
         with:
-          go-version: 1.19
+          go-version: '>=1.19.1'
       - run: task docs:build
       - uses: wjdp/htmltest-action@09118714cd26bef56bd3d0819e4f9b1dce6f60a9 # master
         with:
diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index e2044ed70..d18d6541f 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -24,7 +24,7 @@ jobs:
           token: ${{ secrets.GH_PAT }}
       - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # v3
         with:
-          go-version: 1.19
+          go-version: '>=1.19.1'
       - uses: arduino/setup-task@ca745e18916de727f841ec824ac20a615f1cddea # v1
       - run: task docs:generate
       - run: task schema:generate
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index af392a097..0e5b62416 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # v3
         with:
-          go-version: ~1.19
+          go-version: '>=1.19.1'
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3
       - name: golangci-lint
         uses: golangci/golangci-lint-action@537aa1903e5d359d0b27dbc19ddd22c5087f3fbc # v3
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 88994f277..e803e615a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -64,7 +64,7 @@ jobs:
           mkdir -p $HOME/.cache/snapcraft/stage-packages
       - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # v3
         with:
-          go-version: '1.19'
+          go-version: '>=1.19.1'
           cache: true
       - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # v3
         with:
diff --git a/www/docs/ci/actions.md b/www/docs/ci/actions.md
index 625a446d9..f3eabf85d 100644
--- a/www/docs/ci/actions.md
+++ b/www/docs/ci/actions.md
@@ -36,7 +36,7 @@ jobs:
       - run: git fetch --force --tags
       - uses: actions/setup-go@v3
         with:
-          go-version: 1.19
+          go-version: '>=1.19.1'
           cache: true
       - uses: goreleaser/goreleaser-action@v2
         with: