diff --git a/Dockerfile b/Dockerfile
index 7cc98c93..9ea23e37 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,8 +1,8 @@
 # (first line comment needed for DOCKER_BUILDKIT use)
 #
 # use skopeo inspect to get the multiarch manifest list digest
-# skopeo inspect --override-os linux docker://golang:1.22.4-alpine3.19 | jq -r '.Digest'
-ARG GOLANG_IMAGE=docker.io/library/golang:1.22.5-alpine3.19@sha256:0642d4f809abf039440540de1f0e83502401686e3946ed8e7398a1d94648aa6d
+# skopeo inspect --override-os linux docker://golang:1.23.0-alpine3.19 | jq -r '.Digest'
+ARG GOLANG_IMAGE=docker.io/library/golang:1.23.0-alpine3.19@sha256:fe8f9c7d418d3ac91787f11c31071c4814b6da5f9aae55bc581a7aacc264c395
 ARG BASE_IMAGE=scratch
 
 FROM ${GOLANG_IMAGE} AS builder
diff --git a/go.mod b/go.mod
index 5176c647..896df08d 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/cilium/certgen
 
-go 1.22.5
+go 1.23.0
 
 require (
 	github.com/cloudflare/cfssl v1.6.5