diff --git a/.github/go.mod b/.github/go.mod
index 56f2af9d..9c70ef9a 100644
--- a/.github/go.mod
+++ b/.github/go.mod
@@ -1,11 +1,10 @@
 module sigstore/sigstore-python
 
-go 1.23
+go 1.23.1
 
-require (
-    // We don't have a Go module here but this file is picked up by dependabot
-    // and this will automatically update the dependency when needed.
+toolchain go1.23.5
 
-    github.com/sigstore/timestamp-authority v1.2.3
+// We don't have a Go module here but this file is picked up by dependabot
+// and this will automatically update the dependency when needed.
 
-)
+require github.com/sigstore/timestamp-authority v1.2.4
diff --git a/.github/go.sum b/.github/go.sum
new file mode 100644
index 00000000..42d5069e
--- /dev/null
+++ b/.github/go.sum
@@ -0,0 +1,2 @@
+github.com/sigstore/timestamp-authority v1.2.4 h1:RjXZxOWorEiem/uSr0pFHVtQpyzpcFxgugo5jVqm3mw=
+github.com/sigstore/timestamp-authority v1.2.4/go.mod h1:ExrbobKdEuwuBptZIiKp1IaVBRiUeKbiuSyZTO8Okik=
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 864f0fe7..186c2dd8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -65,7 +65,7 @@ jobs:
       - name: test (timestamp-authority)
         if: ${{ matrix.conf.os == 'ubuntu-latest' }}
         run: |
-          SIGSTORE_TIMESTAMP_VERSION=$(grep "github.com/sigstore/timestamp-authority" .github/go.mod | awk '{print $2}')
+          SIGSTORE_TIMESTAMP_VERSION=$(grep "github.com/sigstore/timestamp-authority" .github/go.mod | awk '{print $3}')
           wget https://github.com/sigstore/timestamp-authority/releases/download/${SIGSTORE_TIMESTAMP_VERSION}/timestamp-server-linux-amd64 -O /tmp/timestamp-server
           chmod +x /tmp/timestamp-server
           # Run the TSA in background