diff --git a/images/prow-tests/Dockerfile b/images/prow-tests/Dockerfile
index 72225de35..dd4b80b56 100644
--- a/images/prow-tests/Dockerfile
+++ b/images/prow-tests/Dockerfile
@@ -161,11 +161,11 @@ RUN curl -fsSL "https://github.com/protocolbuffers/protobuf/releases/download/v$
 # protoc-gen-gogofaster is installed below
 
 ############################################################
-FROM golang:1.19.9 AS external-go-previous
+FROM golang:1.19.11 AS external-go-previous
 # Capture the version that dependabot bumps so that we can install it into the base image
 RUN go version | cut -d' ' -f3 > /golang.version
 
-FROM golang:1.20.4 AS external-go-latest
+FROM golang:1.20.6 AS external-go-latest
 # Capture the version that dependabot bumps so that we can install it into the base image
 RUN go version | cut -d' ' -f3 > /golang.version
 
@@ -185,6 +185,9 @@ ARG JSONNET_VERSION=v0.18.0
 ARG COSIGN_VERSION=v1.13.0
 ARG TOOLBOX_VERSION=2051540f04c2a8fb5ad50c717345c2dd69a0b71e
 
+# Disable CGO libs to avoid error with too old version in base image
+ENV CGO_ENABLED=0
+
 # Extra tools through go install
 # These run using the golang image version of Go, not any defined by `gvm`
 RUN go install github.com/google/ko@${KO_VERSION}
diff --git a/images/tool/Dockerfile b/images/tool/Dockerfile
index 19f1e8c4f..2c51d7601 100644
--- a/images/tool/Dockerfile
+++ b/images/tool/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.20.4
+FROM golang:1.20.6
 
 # Required input: -e TOOL_NAME=name, i.e. TOOL_NAME=flaky-test-reporter
 ARG TOOL_NAME