diff --git a/.github/workflows/goreleaser-edge.yml b/.github/workflows/goreleaser-edge.yml
index df3a72da..248669ed 100644
--- a/.github/workflows/goreleaser-edge.yml
+++ b/.github/workflows/goreleaser-edge.yml
@@ -27,7 +27,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v4
         with:
-          go-version: ">=1.20.4"
+          go-version: ">=1.21.0"
           cache: false
       - name: Log in to the Container registry
         uses: docker/login-action@v2
diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index bb315059..71832fc4 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v4
         with:
-          go-version: ">=1.20.4"
+          go-version: ">=1.21.0"
           cache: false
 
       - name: 'Authenticate to Google Cloud'
diff --git a/.github/workflows/pr-test-lint.yml b/.github/workflows/pr-test-lint.yml
index 40bae2d4..53e8b9f8 100644
--- a/.github/workflows/pr-test-lint.yml
+++ b/.github/workflows/pr-test-lint.yml
@@ -9,7 +9,7 @@ on:
       - 'go.sum'
 
 env:
-  GO_VERSION: ">=1.20.4"
+  GO_VERSION: ">=1.21.0"
 
 jobs:
   # Check if there is any dirty change for go mod tidy
diff --git a/go.mod b/go.mod
index 476e9452..201e5290 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,8 @@
 module go.mondoo.com/cnspec
 
-go 1.20
+go 1.21
+
+toolchain go1.21.0
 
 require (
 	github.com/Masterminds/semver v1.5.0