diff --git a/Dockerfile b/Dockerfile
index 440ed82e80..0a04da5474 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,7 +15,7 @@
 # limitations under the License.
 
 # Build the manager binary
-ARG GOLANG_VERSION=golang:1.20.6
+ARG GOLANG_VERSION=golang:1.20.8
 FROM --platform=${BUILDPLATFORM} ${GOLANG_VERSION} as builder
 WORKDIR /workspace
 
diff --git a/Makefile b/Makefile
index cbf442f553..651994528f 100644
--- a/Makefile
+++ b/Makefile
@@ -23,7 +23,7 @@ SHELL:=/usr/bin/env bash
 #
 # Go.
 #
-GO_VERSION ?= 1.20.7
+GO_VERSION ?= 1.20.8
 GO_CONTAINER_IMAGE ?= docker.io/library/golang:$(GO_VERSION)
 
 # Use GOPROXY environment variable if set
diff --git a/hack/ensure-go.sh b/hack/ensure-go.sh
index b47c3447f4..7c039a69ae 100755
--- a/hack/ensure-go.sh
+++ b/hack/ensure-go.sh
@@ -19,7 +19,7 @@ set -o nounset
 set -o pipefail
 
 # MIN_GO_VERSION is the minimum, supported Go version.
-MIN_GO_VERSION="go${MIN_GO_VERSION:-1.20.6}"
+MIN_GO_VERSION="go${MIN_GO_VERSION:-1.20.8}"
 
 # Ensure the go tool exists and is a viable version.
 verify_go_version() {