diff --git a/.github/workflows/gh_release.yml b/.github/workflows/gh_release.yml
index 640ad6b925..7068de7e75 100644
--- a/.github/workflows/gh_release.yml
+++ b/.github/workflows/gh_release.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: actions/setup-go@v3
         with:
           stable: "false"
-          go-version: "1.17"
+          go-version: "1.18"
       - run: go version
 
       - name: Import GPG key
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1d5cdc70c8..c33b90c8f5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ jobs:
       - uses: actions/setup-go@v3
         with:
           stable: "false"
-          go-version: "1.17"
+          go-version: "1.18"
       - run: go version
 
       - name: Import GPG key
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 9408727a45..011b90de59 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,7 +19,7 @@ jobs:
     - uses: actions/checkout@v3
     - uses: actions/setup-go@v3
       with:
-        go-version: '1.17'
+        go-version: '1.18'
     - run: go version
 
     - uses: actions/cache@v3
diff --git a/go.mod b/go.mod
index ba61e6d999..02439b77e3 100644
--- a/go.mod
+++ b/go.mod
@@ -5,7 +5,7 @@ go 1.18
 require (
 	github.com/AlecAivazis/survey/v2 v2.3.4
 	github.com/Masterminds/semver v1.5.0
-	github.com/aquasecurity/defsec v0.60.1
+	github.com/aquasecurity/defsec v0.60.3
 	github.com/hashicorp/go-version v1.5.0
 	github.com/inconshreveable/go-update v0.0.0-20160112193335-8152e7eb6ccf
 	github.com/liamg/clinch v1.6.1
diff --git a/go.sum b/go.sum
index b6d91b1161..d0d16ca7dc 100644
--- a/go.sum
+++ b/go.sum
@@ -139,8 +139,8 @@ github.com/apparentlymart/go-dump v0.0.0-20180507223929-23540a00eaa3/go.mod h1:o
 github.com/apparentlymart/go-textseg v1.0.0/go.mod h1:z96Txxhf3xSFMPmb5X/1W05FF/Nj9VFpLOpjS5yuumk=
 github.com/apparentlymart/go-textseg/v13 v13.0.0 h1:Y+KvPE1NYz0xl601PVImeQfFyEy6iT90AvPUL1NNfNw=
 github.com/apparentlymart/go-textseg/v13 v13.0.0/go.mod h1:ZK2fH7c4NqDTLtiYLvIkEghdlcqw7yxLeM89kiTRPUo=
-github.com/aquasecurity/defsec v0.60.1 h1:mv4NBiVCW/slShLzQRADRbfZE3CCCd1/gUSd0pwytQM=
-github.com/aquasecurity/defsec v0.60.1/go.mod h1:YmiMubVQYCwT3tuyDpxEUKiUunAfpcDqT4NqFfWGbN8=
+github.com/aquasecurity/defsec v0.60.3 h1:mYpxCATtOSZWrsfxQHw4WPmFIVNVMh6clpEnII9Eu/o=
+github.com/aquasecurity/defsec v0.60.3/go.mod h1:YmiMubVQYCwT3tuyDpxEUKiUunAfpcDqT4NqFfWGbN8=
 github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e/go.mod h1:3U/XgcO3hCbHZ8TKRvWD2dDTCfh9M9ya+I9JpbB7O8o=
 github.com/armon/consul-api v0.0.0-20180202201655-eb2c6b5be1b6/go.mod h1:grANhF5doyWs3UAsr3K4I6qtAmlQcZDesFNEHPZAzj8=
 github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da/go.mod h1:Q73ZrmVTwzkszR9V5SSuryQ31EELlFMUz1kKyl939pY=