diff --git a/.github/workflows/build-and-release.yml b/.github/workflows/build-and-release.yml
index 3c611ec..bd6af27 100644
--- a/.github/workflows/build-and-release.yml
+++ b/.github/workflows/build-and-release.yml
@@ -21,7 +21,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v7
         with:
-          go-version: '1.26.x'
+          go-version: '1.26.10'
 
       - name: Download dependencies
         run: go mod download
@@ -78,7 +78,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v7
         with:
-          go-version: '1.26.x'
+          go-version: '1.26.10'
 
       - name: Install cosign
         uses: sigstore/cosign-installer@v3
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index f1ee7ae..657da38 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -17,7 +17,7 @@ jobs:
 
       - uses: actions/setup-go@v7
         with:
-          go-version: '1.26.x'
+          go-version: '1.26.10'
 
       - name: Install govulncheck
         run: go install golang.org/x/vuln/cmd/govulncheck@latest
diff --git a/Dockerfile b/Dockerfile
index 651e98f..50ec529 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # --- Build Stage ---
-FROM golang:1.26-alpine AS builder
+FROM golang:1.26.10-alpine AS builder
 
 WORKDIR /app
 
diff --git a/go.mod b/go.mod
index 68b79e8..b1b9614 100644
--- a/go.mod
+++ b/go.mod
@@ -2,6 +2,8 @@ module github.com/scalytics/kshark-core
 
 go 1.25.0
 
+toolchain go1.26.10
+
 require (
 	github.com/jackc/pgx/v5 v5.10.0
 	github.com/segmentio/kafka-go v0.4.51