diff --git a/.github/workflows/release-github.yml b/.github/workflows/release-github.yml
index 59eb36dfc..577034976 100644
--- a/.github/workflows/release-github.yml
+++ b/.github/workflows/release-github.yml
@@ -29,7 +29,7 @@ jobs:
       - name: setup go environment
         uses: actions/setup-go@v3
         with:
-          go-version: '1.19.2'
+          go-version: '1.19.5'
       - name: run goreleaser
         uses: goreleaser/goreleaser-action@v2
         with:
diff --git a/Dockerfile b/Dockerfile
index b36379aa3..372b4d2fd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,7 +11,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM docker.io/library/golang:1.19.2-alpine as builder
+FROM docker.io/library/golang:1.19.5-alpine as builder
 ARG TARGETPLATFORM
 RUN apk add git make
 ENV ORASPKG /oras
@@ -20,7 +20,7 @@ WORKDIR ${ORASPKG}
 RUN make "build-$(echo $TARGETPLATFORM | tr / -)"
 RUN mv ${ORASPKG}/bin/${TARGETPLATFORM}/oras /go/bin/oras
 
-FROM docker.io/library/alpine:3.15.4
+FROM docker.io/library/alpine:3.17.1
 RUN apk --update add ca-certificates
 COPY --from=builder /go/bin/oras /bin/oras
 RUN mkdir /workspace