diff --git a/.github/workflows/fulcio-rekor-kind.yaml b/.github/workflows/fulcio-rekor-kind.yaml
index 12630753e..4e28c3a12 100644
--- a/.github/workflows/fulcio-rekor-kind.yaml
+++ b/.github/workflows/fulcio-rekor-kind.yaml
@@ -36,7 +36,7 @@ jobs:
         - fulcio rekor ctlog e2e
 
         go-version:
-          - 1.17.x
+          - 1.18
 
     env:
       GOPATH: ${{ github.workspace }}
@@ -54,6 +54,8 @@ jobs:
       uses: actions/setup-go@fcdc43634adb5f7ae75a9d7a9b9361790f7293e2 # v3.0.0
       with:
         go-version: ${{ matrix.go-version }}
+        check-latest: true
+        cache: true
 
     - name: Check out our repo
       uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3.0.2
@@ -73,7 +75,7 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-go-${{ matrix.go-version }}-
 
-    - uses: imjasonh/setup-ko@2c3450ca27f6e6f2b02e72a40f2163c281a1f675 # v0.4
+    - uses: imjasonh/setup-ko@78eea08f10db87a7a23a666a4a6fe2734f2eeb8d # v0.4
       with:
         version: tip
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f628baea3..dbb41b5f5 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -22,10 +22,12 @@ jobs:
     steps:
     - uses: actions/setup-go@fcdc43634adb5f7ae75a9d7a9b9361790f7293e2 # v3.0.0
       with:
-        go-version: 1.17.x
+        go-version: 1.18
+        check-latest: true
+        cache: true
     # will use the latest release available for ko
     - name: Install ko
-      uses: imjasonh/setup-ko@2c3450ca27f6e6f2b02e72a40f2163c281a1f675 # v0.4
+      uses: imjasonh/setup-ko@78eea08f10db87a7a23a666a4a6fe2734f2eeb8d # v0.4
 
     - name: Install cosign
       uses: sigstore/cosign-installer@536b37ec5d5b543420bdfd9b744c5965bd4d8730 # v2.3.0
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 16285ba7d..8eeff446d 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -6,9 +6,6 @@ on:
 
 permissions: read-all
 
-env:
-  GO_VERSION: 1.17.x
-
 jobs:
   license-check:
     name: license boilerplate check
@@ -17,7 +14,9 @@ jobs:
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3.0.2
       - uses: actions/setup-go@fcdc43634adb5f7ae75a9d7a9b9361790f7293e2 # v3.0.0
         with:
-          go-version: ${{ env.GO_VERSION }}
+          go-version: 1.18
+          check-latest: true
+          cache: true
       - name: Install addlicense
         run: go install github.com/google/addlicense@latest
       - name: Check license headers
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 4ba82d370..5ddb528ac 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -6,7 +6,7 @@ env:
 
 before:
   hooks:
-    - go mod tidy -compat=1.17
+    - go mod tidy
     - /bin/bash -c 'if [ -n "$(git --no-pager diff --exit-code go.mod go.sum)" ]; then exit 1; fi'
     - /bin/bash -c 'make release-images'
     - /bin/bash -c 'make sign-images'
diff --git a/go.mod b/go.mod
index 3b9ef51d3..c419fff0d 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/sigstore/scaffolding
 
-go 1.17
+go 1.18
 
 require (
 	github.com/go-openapi/runtime v0.24.0