diff --git a/bazel/toolchains/ci_deps.bzl b/bazel/toolchains/ci_deps.bzl
index 5bb4fb235..be25a162d 100644
--- a/bazel/toolchains/ci_deps.bzl
+++ b/bazel/toolchains/ci_deps.bzl
@@ -223,45 +223,45 @@ def _golangci_lint_deps():
         name = "com_github_golangci_golangci_lint_linux_amd64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/71e290acbacb7b3ba4f68f0540fb74dc180c4336ac8a6f3bdcd7fcc48b15148d",
-            "https://github.com/golangci/golangci-lint/releases/download/v1.64.6/golangci-lint-1.64.6-linux-amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/b6270687afb143d019f387c791cd2a6f1cb383be9b3124d241ca11bd3ce2e54e",
+            "https://github.com/golangci/golangci-lint/releases/download/v1.64.8/golangci-lint-1.64.8-linux-amd64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-1.64.6-linux-amd64",
+        strip_prefix = "golangci-lint-1.64.8-linux-amd64",
         type = "tar.gz",
-        sha256 = "71e290acbacb7b3ba4f68f0540fb74dc180c4336ac8a6f3bdcd7fcc48b15148d",
+        sha256 = "b6270687afb143d019f387c791cd2a6f1cb383be9b3124d241ca11bd3ce2e54e",
     )
     http_archive(
         name = "com_github_golangci_golangci_lint_linux_arm64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/99a7ff13dec7a8781a68408b6ecb8a1c5e82786cba3189eaa91d5cdcc24362ce",
-            "https://github.com/golangci/golangci-lint/releases/download/v1.64.6/golangci-lint-1.64.6-linux-arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/a6ab58ebcb1c48572622146cdaec2956f56871038a54ed1149f1386e287789a5",
+            "https://github.com/golangci/golangci-lint/releases/download/v1.64.8/golangci-lint-1.64.8-linux-arm64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-1.64.6-linux-arm64",
+        strip_prefix = "golangci-lint-1.64.8-linux-arm64",
         type = "tar.gz",
-        sha256 = "99a7ff13dec7a8781a68408b6ecb8a1c5e82786cba3189eaa91d5cdcc24362ce",
+        sha256 = "a6ab58ebcb1c48572622146cdaec2956f56871038a54ed1149f1386e287789a5",
     )
     http_archive(
         name = "com_github_golangci_golangci_lint_darwin_amd64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/08f9459e7125fed2612abd71596e04d172695921aff82120d1c1e5e9b6fff2a3",
-            "https://github.com/golangci/golangci-lint/releases/download/v1.64.6/golangci-lint-1.64.6-darwin-amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/b52aebb8cb51e00bfd5976099083fbe2c43ef556cef9c87e58a8ae656e740444",
+            "https://github.com/golangci/golangci-lint/releases/download/v1.64.8/golangci-lint-1.64.8-darwin-amd64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-1.64.6-darwin-amd64",
+        strip_prefix = "golangci-lint-1.64.8-darwin-amd64",
         type = "tar.gz",
-        sha256 = "08f9459e7125fed2612abd71596e04d172695921aff82120d1c1e5e9b6fff2a3",
+        sha256 = "b52aebb8cb51e00bfd5976099083fbe2c43ef556cef9c87e58a8ae656e740444",
     )
     http_archive(
         name = "com_github_golangci_golangci_lint_darwin_arm64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/8c10d0c7c3935b8c2269d628b6a06a8f48d8fb4cc31af02fe4ce0cd18b0704c1",
-            "https://github.com/golangci/golangci-lint/releases/download/v1.64.6/golangci-lint-1.64.6-darwin-arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/70543d21e5b02a94079be8aa11267a5b060865583e337fe768d39b5d3e2faf1f",
+            "https://github.com/golangci/golangci-lint/releases/download/v1.64.8/golangci-lint-1.64.8-darwin-arm64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-1.64.6-darwin-arm64",
+        strip_prefix = "golangci-lint-1.64.8-darwin-arm64",
         type = "tar.gz",
-        sha256 = "8c10d0c7c3935b8c2269d628b6a06a8f48d8fb4cc31af02fe4ce0cd18b0704c1",
+        sha256 = "70543d21e5b02a94079be8aa11267a5b060865583e337fe768d39b5d3e2faf1f",
     )
 
 def _buf_deps():