diff --git a/Dockerfile b/Dockerfile
index e1c7385..dc35358 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM --platform=$BUILDPLATFORM golang:1.26 AS builder
+FROM --platform=$BUILDPLATFORM golang:1.26@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a AS builder
 
 WORKDIR /workspace
 RUN go env -w GOMODCACHE=/root/.cache/go-build
diff --git a/flake.nix b/flake.nix
index a096e48..adfa357 100644
--- a/flake.nix
+++ b/flake.nix
@@ -24,7 +24,7 @@
       {
         devShells.default = dev-kit.lib.mkShell {
           inherit system;
-          goVersion = "1.26.2";
+          goVersion = "1.26.3";
           preCommitHooks = {
             commitlint.enable = true;
           };
diff --git a/go.mod b/go.mod
index 46837a7..7f30cb3 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module go.opendefense.cloud/ocm-kit
 
-go 1.26.2
+go 1.26.3
 
 require (
 	github.com/Masterminds/sprig/v3 v3.3.0