diff --git a/.github/workflows/quality-gates.yml b/.github/workflows/quality-gates.yml
index 9a912af..d27ce4a 100644
--- a/.github/workflows/quality-gates.yml
+++ b/.github/workflows/quality-gates.yml
@@ -38,7 +38,7 @@ jobs:
       packages: read
     # attested-delivery/.github main @ 698148e (post-#4, 2026-06-19)
     uses: >-
-      attested-delivery/.github/.github/workflows/reusable-sast-codeql.yml@ca91728c87beb08742325b4ed4d06fcfb261435b
+      attested-delivery/.github/.github/workflows/reusable-sast-codeql.yml@78f1933ef020e3d94af848a191297d26e8dc8b4c
     with:
       languages: actions
       build-mode: none
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 810d2b6..75e1b49 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -180,7 +180,7 @@ jobs:
       packages: read
     # attested-delivery/.github main @ 698148e (post-#4, 2026-06-19)
     uses: >-
-      attested-delivery/.github/.github/workflows/reusable-sast-codeql.yml@ca91728c87beb08742325b4ed4d06fcfb261435b
+      attested-delivery/.github/.github/workflows/reusable-sast-codeql.yml@78f1933ef020e3d94af848a191297d26e8dc8b4c
     with:
       languages: actions
       build-mode: none