diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 403f4978f..2b7ea1a94 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -46,7 +46,7 @@ jobs:
       - name: Setup OPA
         uses: open-policy-agent/setup-opa@v2.2.0
         with:
-          version: 0.59.0
+          version: 0.64.1
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index a4163a902..8c0de924b 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -33,7 +33,7 @@ jobs:
       - name: Setup OPA
         uses: open-policy-agent/setup-opa@v2.2.0
         with:
-          version: 0.59.0
+          version: 0.64.1
 
       - name: Lint policies
         working-directory: ./policies
@@ -202,7 +202,7 @@ jobs:
       - name: Setup OPA
         uses: open-policy-agent/setup-opa@v2.2.0
         with:
-          version: 0.59.0
+          version: 0.64.1
 
       - name: Compile OPA policies
         working-directory: ./policies
@@ -264,7 +264,7 @@ jobs:
       - name: Setup OPA
         uses: open-policy-agent/setup-opa@v2.2.0
         with:
-          version: 0.59.0
+          version: 0.64.1
 
       - name: Compile OPA policies
         working-directory: ./policies
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index f057bf98a..a73f2df17 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -29,7 +29,7 @@ jobs:
       - name: Setup OPA
         uses: open-policy-agent/setup-opa@v2.2.0
         with:
-          version: 0.59.0
+          version: 0.64.1
 
       - name: Run OPA tests with coverage
         working-directory: ./policies
@@ -125,7 +125,7 @@ jobs:
       - name: Setup OPA
         uses: open-policy-agent/setup-opa@v2.2.0
         with:
-          version: 0.59.0
+          version: 0.64.1
 
       - name: Compile OPA policies
         working-directory: ./policies
diff --git a/Dockerfile b/Dockerfile
index bc5033429..678500be0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,7 +13,7 @@ ARG RUSTC_VERSION=1.78.0
 # XXX: Upgrade to 0.11.0 blocked by https://github.com/rust-cross/cargo-zigbuild/issues/162
 ARG ZIG_VERSION=0.9.1
 ARG NODEJS_VERSION=20.9.0
-ARG OPA_VERSION=0.59.0
+ARG OPA_VERSION=0.64.1
 ARG CARGO_AUDITABLE_VERSION=0.6.2
 ARG CARGO_CHEF_VERSION=0.1.64
 ARG CARGO_ZIGBUILD_VERSION=0.18.3
diff --git a/policies/Makefile b/policies/Makefile
index b0d1ca46c..d216fc011 100644
--- a/policies/Makefile
+++ b/policies/Makefile
@@ -1,7 +1,7 @@
 # Set to 1 to run OPA through Docker
 DOCKER := 0
 PODMAN := 0
-OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:0.59.0-debug
+OPA_DOCKER_IMAGE := docker.io/openpolicyagent/opa:0.64.1-debug
 
 INPUTS := \
 	client_registration.rego \