diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 8fc56fa39e7b47d1fe5ba84c0f0e7cb65733a264..9c70b17828afe559a096b5a55da1eeed762b9ee9 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -69,6 +69,7 @@ jobs:
         with:
           output-format: sarif
           output-file: results.sarif
+          go-version-input: 1.26.0-rc.1 # change to "stable" once Go 1.26 is released
       - uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
         with:
           sarif_file: results.sarif