diff --git a/.github/workflows/lint-codeql.yml b/.github/workflows/lint-codeql.yml
index 5971d1c3306..0aea4ec0b43 100644
--- a/.github/workflows/lint-codeql.yml
+++ b/.github/workflows/lint-codeql.yml
@@ -16,7 +16,7 @@ jobs:
   check_changes:
     name: Deduce required tests from code changes
     if: ${{ github.event_name == 'pull_request' }}
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     outputs:
       go-changes: ${{ steps.go-changes.outputs.src }}
     steps:
@@ -41,7 +41,7 @@ jobs:
   analyze:
     needs: check_changes
     if: ${{ needs.check_changes.outputs.go-changes == 'true' || github.event_name != 'pull_request' }}
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     permissions:
       security-events: write
     steps: