From 10b714355dd5555f8205150a70ce83b827805da7 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Mon, 21 Sep 2026 22:41:17 +0000
Subject: [PATCH] chore(ci): bump standards reusable pins to the actions.lock
 resync (b1a3b7b)

Follow-up to PR #95 (merged with the a521ed7 pins, whose stale actions.lock
made all four reusables unparseable) now that hyperpolymath/standards#893
has landed as b1a3b7b:

- the lock at the pin now matches the workflows (53/53 verified clean
  upstream with 'gh actions-lock --no-fix'), so governance-, hypatia-,
  scorecard-, and secret-scanner-reusable parse for callers again;
- the hypatia findings-validator repair (standards#886) and the 'warn'
  severity whitelist (the standards#892 root cause) are included, so the
  Hypatia check can go green;
- governance/secret-scanner/scorecard wrappers pass no inputs and already
  grant the permissions the current reusables require (scorecard's calling
  job has actions:read).

Closes the last red relevant checks on main; pre-existing unrelated
estate reds (Mirror to Git Forges credentials; 7 hypatia findings against
workflow YAML) are explicitly out of scope here.
---
 .github/workflows/governance.yml     | 2 +-
 .github/workflows/hypatia-scan.yml   | 2 +-
 .github/workflows/scorecard.yml      | 2 +-
 .github/workflows/secret-scanner.yml | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
index da79b54..f069dc8 100644
--- a/.github/workflows/governance.yml
+++ b/.github/workflows/governance.yml
@@ -30,7 +30,7 @@ permissions:
   contents: read
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@a521ed701f0e58cc5e7effd239b10b360908365a
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@b1a3b7b7c9c8cef5e8c8d44771426e7764b9521e
     permissions:
       actions: read
       contents: read
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
index c5eeda4..8ad25fd 100644
--- a/.github/workflows/hypatia-scan.yml
+++ b/.github/workflows/hypatia-scan.yml
@@ -39,5 +39,5 @@ permissions:
   pull-requests: write
 jobs:
   hypatia:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@a521ed701f0e58cc5e7effd239b10b360908365a
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@b1a3b7b7c9c8cef5e8c8d44771426e7764b9521e
     secrets: inherit
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index f299dff..f701623 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -37,4 +37,4 @@ jobs:
       contents: read
       security-events: write
       id-token: write
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@a521ed701f0e58cc5e7effd239b10b360908365a
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@b1a3b7b7c9c8cef5e8c8d44771426e7764b9521e
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
index aea0acb..1e5316d 100644
--- a/.github/workflows/secret-scanner.yml
+++ b/.github/workflows/secret-scanner.yml
@@ -19,7 +19,7 @@ permissions:
   contents: read
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@a521ed701f0e58cc5e7effd239b10b360908365a
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@b1a3b7b7c9c8cef5e8c8d44771426e7764b9521e
     secrets: inherit
     permissions:
       actions: read