From cfd4df3986045a39b5353dd199d33cd8928076f0 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Wed, 12 Aug 2026 01:00:41 +0100
Subject: [PATCH] fix(ci): update all reusable workflow SHA pins to current
 HEAD
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Update SHA pins for:
- governance-reusable: 08586a1→7fdc270
- hypatia-scan-reusable: 08586a1→7fdc270
- mirror-reusable: 08586a1→7fdc270
- scorecard-reusable: 08586a1→d7c2271
- secret-scanner-reusable: 08586a1→db12a6a
- spark-theatre-gate: 08586a1→7fdc270

This ensures all reusable workflows are pinned to their latest versions.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
---
 .github/workflows/governance.yml         | 2 +-
 .github/workflows/hypatia-scan.yml       | 2 +-
 .github/workflows/mirror.yml             | 2 +-
 .github/workflows/scorecard.yml          | 2 +-
 .github/workflows/secret-scanner.yml     | 2 +-
 .github/workflows/spark-theatre-gate.yml | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
index 73b9e20f..3c36320c 100644
--- a/.github/workflows/governance.yml
+++ b/.github/workflows/governance.yml
@@ -16,4 +16,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@08586a12bb64b98268fe9ebf552998aa2433a3c2
\ No newline at end of file
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
\ No newline at end of file
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
index a1f535ec..0878dca6 100644
--- a/.github/workflows/hypatia-scan.yml
+++ b/.github/workflows/hypatia-scan.yml
@@ -19,4 +19,4 @@ permissions:
 
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@08586a12bb64b98268fe9ebf552998aa2433a3c2
\ No newline at end of file
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
\ No newline at end of file
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
index 51611762..c26d6073 100644
--- a/.github/workflows/mirror.yml
+++ b/.github/workflows/mirror.yml
@@ -11,5 +11,5 @@ permissions:
   contents: read
 jobs:
   mirror:
-    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@08586a12bb64b98268fe9ebf552998aa2433a3c2
+    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
     secrets: inherit
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b86f1a22..c7888b95 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -18,7 +18,7 @@ permissions:
 
 jobs:
   scorecard:
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@08586a12bb64b98268fe9ebf552998aa2433a3c2
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d7c22711e830e1f383846472f6e9b99debdb201e
     permissions:
       # A job-level permissions: block REPLACES the workflow-level one — it does
       # not merge. Omitting actions: read here (granted above) made the called
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
index fd726500..a2905901 100644
--- a/.github/workflows/secret-scanner.yml
+++ b/.github/workflows/secret-scanner.yml
@@ -15,5 +15,5 @@ jobs:
   scan:
     permissions:
       contents: read
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@08586a12bb64b98268fe9ebf552998aa2433a3c2
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@db12a6ad3ef9076d5f7bdcf98d7d15cf8547555a
     secrets: inherit
diff --git a/.github/workflows/spark-theatre-gate.yml b/.github/workflows/spark-theatre-gate.yml
index 1b382411..b54e1696 100644
--- a/.github/workflows/spark-theatre-gate.yml
+++ b/.github/workflows/spark-theatre-gate.yml
@@ -15,7 +15,7 @@ permissions:
   contents: read
 jobs:
   spark-theatre-gate:
-    uses: hyperpolymath/standards/.github/workflows/spark-theatre-gate.yml@08586a12bb64b98268fe9ebf552998aa2433a3c2
+    uses: hyperpolymath/standards/.github/workflows/spark-theatre-gate.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329
     with:
       paths: "."
       enforce_zero_contract: false