diff --git a/.github/workflows/checkLicenses.yml b/.github/workflows/checkLicenses.yml
index 13ae6fc1b..351d290a8 100644
--- a/.github/workflows/checkLicenses.yml
+++ b/.github/workflows/checkLicenses.yml
@@ -24,7 +24,7 @@ jobs:
       - name: Set up Go 1.20
         uses: actions/setup-go@v3
         with:
-          go-version: '>=1.20.6'
+          go-version: '>=1.20.7'
       - run: |
           ./scripts/create-licenses.sh
       # Upload the licenses list so it's available if needed
diff --git a/.github/workflows/e2eEnvironment.yml b/.github/workflows/e2eEnvironment.yml
index 8d1cbf71b..b83673598 100644
--- a/.github/workflows/e2eEnvironment.yml
+++ b/.github/workflows/e2eEnvironment.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v3
         with:
-          go-version: '>=1.20.6'
+          go-version: '>=1.20.7'
       - uses: actions/checkout@v3
       # Pinned to Commit to ensure action is consistent: https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions
       # If you upgrade this version confirm the changes match your expectations
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index ab6781ef2..14487f7b3 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -48,7 +48,7 @@ jobs:
       - name: Set up Go 1.20
         uses: actions/setup-go@v3
         with:
-          go-version: '>=1.20.6'
+          go-version: '>=1.20.7'
         id: go
       - name: Check out code into the Go module directory
         uses: actions/checkout@v3
@@ -70,7 +70,7 @@ jobs:
       - name: Set up Go 1.20
         uses: actions/setup-go@v3
         with:
-          go-version: '>=1.20.6'
+          go-version: '>=1.20.7'
         id: go
       - name: Check out code into the Go module directory
         uses: actions/checkout@v3
@@ -88,7 +88,7 @@ jobs:
 #      - name: Set up Go 1.20
 #        uses: actions/setup-go@v1
 #        with:
-#          go-version: '>=1.20.6'
+#          go-version: '>=1.20.7'
 #        id: go
 #      - name: Check out code into the Go module directory
 #        uses: actions/checkout@v3
diff --git a/.github/workflows/live-e2e.yml b/.github/workflows/live-e2e.yml
index f2cf2994d..77a39007f 100644
--- a/.github/workflows/live-e2e.yml
+++ b/.github/workflows/live-e2e.yml
@@ -33,7 +33,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v3
         with:
-          go-version: '>=1.20.6'
+          go-version: '>=1.20.7'
       - uses: actions/checkout@master
       # Pinned to Commit to ensure action is consistent: https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions
       # If you upgrade this version confirm the changes match your expectations
diff --git a/.github/workflows/porch-e2e.yml b/.github/workflows/porch-e2e.yml
index 554dee6e0..13650098a 100644
--- a/.github/workflows/porch-e2e.yml
+++ b/.github/workflows/porch-e2e.yml
@@ -56,7 +56,7 @@ jobs:
       - name: Set up Go 1.20
         uses: actions/setup-go@v3
         with:
-          go-version: '>=1.20.6'
+          go-version: '>=1.20.7'
       - name: Checkout Porch
         uses: actions/checkout@v3
       - name: Build kpt
diff --git a/.github/workflows/porch.yml b/.github/workflows/porch.yml
index 18fdf89ea..73241cc20 100644
--- a/.github/workflows/porch.yml
+++ b/.github/workflows/porch.yml
@@ -32,7 +32,7 @@ jobs:
       - name: Set up Go 1.20
         uses: actions/setup-go@v3
         with:
-          go-version: '>=1.20.6'
+          go-version: '>=1.20.7'
       - name: Run Porch Unit Tests
         uses: actions/checkout@v3
       - name: Verify format / headers etc
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b6286f32b..1fe5c9432 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v3
         with:
-          go-version: '>=1.20.6'
+          go-version: '>=1.20.7'
       - name: Checkout
         uses: actions/checkout@v3
         with:
diff --git a/.github/workflows/verifyContent.yml b/.github/workflows/verifyContent.yml
index ea7e8d39e..8a057e0b3 100644
--- a/.github/workflows/verifyContent.yml
+++ b/.github/workflows/verifyContent.yml
@@ -30,7 +30,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v3
         with:
-          go-version: '>=1.20.6'
+          go-version: '>=1.20.7'
       - uses: actions/checkout@v3
       - run: |
           make build
diff --git a/Makefile b/Makefile
index 45b457a04..d69bd13e3 100644
--- a/Makefile
+++ b/Makefile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-GOLANG_VERSION         := 1.20.6
+GOLANG_VERSION         := 1.20.7
 GORELEASER_CONFIG      = release/tag/goreleaser.yaml
 GORELEASER_IMAGE       := ghcr.io/goreleaser/goreleaser-cross:v$(GOLANG_VERSION)
 
diff --git a/porch/build/Dockerfile.apiserver b/porch/build/Dockerfile.apiserver
index 4b4bb2d01..315ccc5dc 100644
--- a/porch/build/Dockerfile.apiserver
+++ b/porch/build/Dockerfile.apiserver
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.20.6-bullseye as builder
+FROM golang:1.20.7-bullseye as builder
 
 WORKDIR /workspace/src
 RUN git clone https://github.com/kubernetes/kubernetes --branch v1.23.2 --depth=1
diff --git a/porch/build/Dockerfile.etcd b/porch/build/Dockerfile.etcd
index abbd86d7e..866f4b126 100644
--- a/porch/build/Dockerfile.etcd
+++ b/porch/build/Dockerfile.etcd
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.20.6-bullseye as builder
+FROM golang:1.20.7-bullseye as builder
 
 WORKDIR /workspace
 ARG ETCD_VER=v3.5.1
diff --git a/porch/build/Dockerfile.porch b/porch/build/Dockerfile.porch
index a5e2d99b6..0125118e0 100644
--- a/porch/build/Dockerfile.porch
+++ b/porch/build/Dockerfile.porch
@@ -13,7 +13,7 @@
 # limitations under the License.
 
 
-FROM golang:1.20.6-bullseye as builder
+FROM golang:1.20.7-bullseye as builder
 
 WORKDIR /go/src/github.com/GoogleContainerTools/kpt
 
diff --git a/porch/controllers/Dockerfile b/porch/controllers/Dockerfile
index e10b9e570..336a02225 100644
--- a/porch/controllers/Dockerfile
+++ b/porch/controllers/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.20.6-bullseye as builder
+FROM golang:1.20.7-bullseye as builder
 
 WORKDIR /workspace
 COPY go.mod go.sum ./
diff --git a/porch/examples/apps/hello-server/Dockerfile b/porch/examples/apps/hello-server/Dockerfile
index 016513e49..d975f563e 100644
--- a/porch/examples/apps/hello-server/Dockerfile
+++ b/porch/examples/apps/hello-server/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.20.6-bullseye as builder
+FROM golang:1.20.7-bullseye as builder
 
 WORKDIR /src
 COPY go.mod go.sum ./
diff --git a/porch/test/Dockerfile b/porch/test/Dockerfile
index 2e3e5cdb5..c7ae25a3d 100644
--- a/porch/test/Dockerfile
+++ b/porch/test/Dockerfile
@@ -13,7 +13,7 @@
 # limitations under the License.
 
 
-FROM golang:1.20.6-bullseye as builder
+FROM golang:1.20.7-bullseye as builder
 
 WORKDIR /go/src/github.com/GoogleContainerTools/kpt