diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 0375020..1f6de13 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -116,7 +116,7 @@ jobs:
       actions: read
       packages: read
     # attested-delivery/.github main @ 698148e (post-#4, 2026-06-19)
-    uses: attested-delivery/.github/.github/workflows/reusable-sast-codeql.yml@698148e12da113cfeeef8742c31ae93657959e67
+    uses: attested-delivery/.github/.github/workflows/reusable-sast-codeql.yml@78f1933ef020e3d94af848a191297d26e8dc8b4c
     with:
       languages: javascript-typescript
       build-mode: none
diff --git a/.github/workflows/quality-gates.yml b/.github/workflows/quality-gates.yml
index a30f3d4..01f83c2 100644
--- a/.github/workflows/quality-gates.yml
+++ b/.github/workflows/quality-gates.yml
@@ -34,7 +34,7 @@ jobs:
       actions: read
       packages: read
     # attested-delivery/.github main @ 698148e (post-#4, 2026-06-19)
-    uses: attested-delivery/.github/.github/workflows/reusable-sast-codeql.yml@698148e12da113cfeeef8742c31ae93657959e67
+    uses: attested-delivery/.github/.github/workflows/reusable-sast-codeql.yml@78f1933ef020e3d94af848a191297d26e8dc8b4c
     with:
       languages: javascript-typescript
       build-mode: none