diff --git a/.github/workflows/code-coverage.yml b/.github/workflows/code-coverage.yml
index 84d821a71..5ed2d9d8f 100644
--- a/.github/workflows/code-coverage.yml
+++ b/.github/workflows/code-coverage.yml
@@ -19,8 +19,6 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
-      id: go
     - name: Run Tests
       run: make test-with-coverage
     - name: Upload Coverage
diff --git a/.github/workflows/compat-test.yml b/.github/workflows/compat-test.yml
index de8829b73..733474d86 100644
--- a/.github/workflows/compat-test.yml
+++ b/.github/workflows/compat-test.yml
@@ -21,8 +21,6 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
-      id: go
     - name: Compat Test
       run: make compat-tests
     - name: Upload Logs
diff --git a/.github/workflows/license-check.yml b/.github/workflows/license-check.yml
index d7cd39d24..fe702fed8 100644
--- a/.github/workflows/license-check.yml
+++ b/.github/workflows/license-check.yml
@@ -19,8 +19,6 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
-      id: go
     - name: Download dependencies
       run: go mod vendor
     - name: Run License Check
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 393dbbc3b..a293477d1 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -33,15 +33,15 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
-      id: go
     - id: govulncheck
       uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4
       with:
         cache: false
         go-version-input: '1.24.7'
-        go-version-file: 'go.mod'
-        # output-format: sarif
+        # An explicit Go version is needed for govulncheck-action since internally
+        # it uses an outdated setup-go@v5.0 action that does not respect the 'toolchain'
+        # directive in the 'go.mod' file.
+        #go-version-file: 'go.mod'
         repo-checkout: false
     - name: Lint
       run: make lint
diff --git a/.github/workflows/make.yml b/.github/workflows/make.yml
index 137b0bfe6..a95a00230 100644
--- a/.github/workflows/make.yml
+++ b/.github/workflows/make.yml
@@ -43,7 +43,6 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
       id: go
     - name: Install Windows-specific packages
       run: "choco install --no-progress -y make zip unzip curl"
diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml
index a06070116..40cf110ea 100644
--- a/.github/workflows/ossf-scorecard.yml
+++ b/.github/workflows/ossf-scorecard.yml
@@ -42,6 +42,7 @@ jobs:
         uses: github/codeql-action/upload-sarif@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.29.5
         with:
           sarif_file: results.sarif
+          category: ossf
       -
         name: "Upload analysis results as 'Job Artifact'"
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
diff --git a/.github/workflows/providers-core.yml b/.github/workflows/providers-core.yml
index 9423e6d50..67597c2ec 100644
--- a/.github/workflows/providers-core.yml
+++ b/.github/workflows/providers-core.yml
@@ -32,8 +32,6 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
-      id: go
     - name: Install Dependencies
       run: make provider-tests-deps
     - name: Azure
diff --git a/.github/workflows/providers-extra.yml b/.github/workflows/providers-extra.yml
index c952f979a..f6f2c1848 100644
--- a/.github/workflows/providers-extra.yml
+++ b/.github/workflows/providers-extra.yml
@@ -32,8 +32,6 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
-      id: go
     - name: Install Dependencies
       run: make provider-tests-deps
     - name: B2
diff --git a/.github/workflows/race-detector.yml b/.github/workflows/race-detector.yml
index 8afb6b114..7b8fb84d6 100644
--- a/.github/workflows/race-detector.yml
+++ b/.github/workflows/race-detector.yml
@@ -19,7 +19,5 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
-      id: go
     - name: Unit Tests
       run: make -j2 test UNIT_TEST_RACE_FLAGS=-race UNIT_TESTS_TIMEOUT=1200s
diff --git a/.github/workflows/stress-test.yml b/.github/workflows/stress-test.yml
index 1e31fa45b..46f8fa5b5 100644
--- a/.github/workflows/stress-test.yml
+++ b/.github/workflows/stress-test.yml
@@ -25,8 +25,6 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
-      id: go
     - name: Stress Test
       run: make stress-test
     - name: Upload Logs
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index f3efd74f9..2e59a2466 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -41,8 +41,6 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
-      id: go
     - name: Install Windows-specific packages
       run: "choco install --no-progress -y make zip unzip curl"
       if: ${{ contains(matrix.os, 'windows') }}
diff --git a/.github/workflows/volume-shadow-copy-test.yml b/.github/workflows/volume-shadow-copy-test.yml
index cafca9625..b3d6a9ca1 100644
--- a/.github/workflows/volume-shadow-copy-test.yml
+++ b/.github/workflows/volume-shadow-copy-test.yml
@@ -22,8 +22,6 @@ jobs:
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version-file: 'go.mod'
-        check-latest: true
-      id: go
     - name: Install gsudo
       shell: bash
       run: |