diff --git a/.bazelci/buildkite-install-go.sh b/.bazelci/buildkite-install-go.sh
index 7bf1ee5e6..05f47250b 100755
--- a/.bazelci/buildkite-install-go.sh
+++ b/.bazelci/buildkite-install-go.sh
@@ -2,7 +2,7 @@
 
 set -euo pipefail
 
-pkg=go1.20.linux-amd64.tar.gz
+pkg=go1.20.1.linux-amd64.tar.gz
 
 wget -o "$HOME/$pkg" "https://golang.org/dl/$pkg" 1>&2
 tar -xv -C "$HOME" -f "$pkg" 1>&2
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index bac824570..99f6512a2 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v3
         with:
-          go-version: '1.20'
+          go-version: '1.20.1'
       - uses: actions/checkout@v3
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v3
diff --git a/WORKSPACE b/WORKSPACE
index 6ba83ffa5..80d34fc95 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -22,7 +22,7 @@ load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_depe
 
 go_rules_dependencies()
 
-go_register_toolchains(version = "1.20")
+go_register_toolchains(version = "1.20.1")
 
 http_archive(
     name = "rules_proto",