diff --git a/pomerium-datasource-ip2location.dockerfile b/pomerium-datasource-ip2location.dockerfile
index bee6f8b..0e3a007 100644
--- a/pomerium-datasource-ip2location.dockerfile
+++ b/pomerium-datasource-ip2location.dockerfile
@@ -9,7 +9,7 @@ RUN --mount=type=secret,id=download_token \
     -o /download/IP2LOCATION-LITE-DB1.CSV.ZIP \
     "https://www.ip2location.com/download/?token=${DOWNLOAD_TOKEN}&file=DB1LITECSV"
 
-FROM golang:1.20.3-buster@sha256:73c225bc5e2353f20dbe0466819b70a51a114a93bfe4af035a3bb9e1ecdd4107 as build
+FROM golang:1.20.4-buster@sha256:4cf6dc46fc03a7aecde79ccc135d875129145b065cb1d29747ac7c8d86979266 as build
 
 WORKDIR /build
 
diff --git a/pomerium-datasource.dockerfile b/pomerium-datasource.dockerfile
index 52fe04a..9afe222 100644
--- a/pomerium-datasource.dockerfile
+++ b/pomerium-datasource.dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.20.3-buster@sha256:73c225bc5e2353f20dbe0466819b70a51a114a93bfe4af035a3bb9e1ecdd4107  as build
+FROM golang:1.20.4-buster@sha256:4cf6dc46fc03a7aecde79ccc135d875129145b065cb1d29747ac7c8d86979266  as build
 
 WORKDIR /build