diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index d01b696..883d0d3 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -30,12 +30,12 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Build the container image
-        uses: docker/build-push-action@v3.0.0
+        uses: docker/build-push-action@v3.1.0
         with:
           repository: golang-repo-template
 
       - name: Push to GitHub Packages
-        uses: docker/build-push-action@v3.0.0
+        uses: docker/build-push-action@v3.1.0
         if: github.event_name == 'release' || github.event_name == 'push'
         with:
           username: ${{ github.actor }}
@@ -66,7 +66,7 @@ jobs:
         if: |
           (github.event_name == 'release' || github.event_name == 'push') &&
           contains(steps.check_dockerhub_credentials.outputs.missingsecrets, 'no')
-        uses: docker/build-push-action@v3.0.0
+        uses: docker/build-push-action@v3.1.0
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 40dcc79..08aa420 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -52,7 +52,7 @@ jobs:
         with:
           go-version: ${{ matrix.golang }}
       - name: Cache Go modules
-        uses: actions/cache@v3.0.2
+        uses: actions/cache@v3.0.5
         with:
           path: ~/go/pkg/mod
           key:          ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }}
@@ -109,7 +109,7 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: ${{ matrix.golang }}
-      - uses: actions/cache@v3.0.2
+      - uses: actions/cache@v3.0.5
         with:
           path: ~/go/pkg/mod
           key:          ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }}
@@ -153,7 +153,7 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: ${{ matrix.golang }}
-      - uses: actions/cache@v3.0.2
+      - uses: actions/cache@v3.0.5
         with:
           path: ~/go/pkg/mod
           key:          ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5cda537..f774195 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,7 +37,7 @@ jobs:
       -
         name: Cache Go modules
         if: steps.semantic.outputs.new-release-published == 'true' && steps.repoman.outputs.has-go-binary == 'true'
-        uses: actions/cache@v3.0.2
+        uses: actions/cache@v3.0.5
         with:
           path: ~/go/pkg/mod
           key:          ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }}
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index cde3a60..7fe2934 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -30,7 +30,7 @@ jobs:
         env:
           SCORECARD_READ_TOKEN: ${{ secrets.SCORECARD_READ_TOKEN }}
         if: env.SCORECARD_READ_TOKEN != null
-        uses: ossf/scorecard-action@f10ec7151e838890a3fbfa27875a33f80869977b # v1.0.4
+        uses: ossf/scorecard-action@ccd0038c79bb718836dc19c8ea53ed89f1d7ca4d # v1.0.4
         with:
           results_file: results.sarif
           results_format: sarif
diff --git a/Dockerfile b/Dockerfile
index 411382e..14e3bd0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@ ARG             VCS_REF
 ARG             VERSION
 
 # build
-FROM            golang:1.18.2-alpine as builder
+FROM            golang:1.18.4-alpine as builder
 RUN             apk add --no-cache git gcc musl-dev make
 ENV             GO111MODULE=on
 WORKDIR         /go/src/moul.io/golang-repo-template
@@ -14,7 +14,7 @@ COPY            . ./
 RUN             make install
 
 # minimalist runtime
-FROM alpine:3.15.4
+FROM alpine:3.16.1
 LABEL           org.label-schema.build-date=$BUILD_DATE \
                 org.label-schema.name="golang-repo-template" \
                 org.label-schema.description="" \
diff --git a/tool/lint/package.json b/tool/lint/package.json
index f334595..abf8192 100644
--- a/tool/lint/package.json
+++ b/tool/lint/package.json
@@ -2,7 +2,7 @@
   "dependencies": {
     "alex": "10.0.0",
     "markdown-spellcheck": "1.3.1",
-    "markdownlint-cli": "0.31.1",
+    "markdownlint-cli": "0.32.0",
     "remark-cli": "10.0.1",
     "remark-lint": "9.1.1"
   }