diff --git a/Dockerfile.test b/Dockerfile.test
index ff9d176..2a92a23 100644
--- a/Dockerfile.test
+++ b/Dockerfile.test
@@ -9,7 +9,7 @@ RUN [ "go", "test", "-v", "./internal/cli/...", "-run", "TestGenerate_InstallDeb
 
 # This line also determines the golang version used for GitHub Actions CI
 # Use the qualified image name, so Dependabot treats this separate from "golang" above.
-FROM docker.io/library/golang:1.20.6-alpine AS apk
+FROM docker.io/library/golang:1.20.7-alpine AS apk
 ENV CGO_ENABLED=0
 WORKDIR /app
 COPY go.mod .