diff --git a/k8s/bases/apps/github-config/oci-repository.yaml b/k8s/bases/apps/github-config/oci-repository.yaml
index b184f497e..3d23f0bf4 100644
--- a/k8s/bases/apps/github-config/oci-repository.yaml
+++ b/k8s/bases/apps/github-config/oci-repository.yaml
@@ -29,4 +29,4 @@ spec:
       # signer and this consumer's current publish-workflow pin in one identity.
       # Regeneration updates the pair and the approved set in the same PR.
       - issuer: '^https://token\.actions\.githubusercontent\.com$'
-        subject: '^https://github\.com/devantler-tech/actions/\.github/workflows/publish-manifests\.yaml@3ee6cb9bbd616c2a38779be41a5e41f3e77282d0$'
+        subject: '^https://github\.com/devantler-tech/actions/\.github/workflows/publish-manifests\.yaml@(3ee6cb9bbd616c2a38779be41a5e41f3e77282d0|a147ead8b8bc937fbfb1974e3698c7e32f95517d)$'
diff --git a/scripts/publish-workflow-approved-revisions.tsv b/scripts/publish-workflow-approved-revisions.tsv
index a539d4fe9..65996dfb7 100644
--- a/scripts/publish-workflow-approved-revisions.tsv
+++ b/scripts/publish-workflow-approved-revisions.tsv
@@ -1,5 +1,5 @@
 consumer	workflow	applied_tag	applied_digest	applied_signer_sha	main_pin_sha	observed_on
-.github	publish-manifests	1.23.3	sha256:3fcbb4d87548bc6b4c5013339d49188834cca8f9db40aa83f577d2a3b68f55a3	3ee6cb9bbd616c2a38779be41a5e41f3e77282d0	3ee6cb9bbd616c2a38779be41a5e41f3e77282d0	2026-09-07
+.github	publish-manifests	1.23.6	sha256:39c0f7781a0d44aa9696fd3b8807f6bdfd838693c21e8f871681f1ef75ae9ebe	3ee6cb9bbd616c2a38779be41a5e41f3e77282d0	a147ead8b8bc937fbfb1974e3698c7e32f95517d	2026-09-10
 ascoachingogvaner	publish-app	1.13.4	sha256:ec90c928fac3c0fbdbe4b534d58d1c95c1d563018d0a8931950018351e79e0f9	625b7c0cd5ad4a04f9eb7494298c6d0fa44521ef	4f4e07a3ebf3e1161756a292966e36c91a65ee04	2026-09-05
 aws	publish-manifests	1.1.3	sha256:6ab289567549d674ddca31eb228e5f610951c9f3e1205f22fe9a0291ee8ceec6	b089a1b041cb86af22cdc57de58a4d7d258dcc32	4f4e07a3ebf3e1161756a292966e36c91a65ee04	2026-09-05
 wedding-app	publish-app	1.15.10	sha256:9d1feacab8cfe386da6292ac3097fffac1572eef76d6d8170600728b37d4909c	6ae5d87b342984cdaf34740e60366b9d570d8fc5	883d891a0e6a2c9420d2b60aea9d5f47c20ce803	2026-09-08