diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
index 7ad2b0f..cae1099 100644
--- a/.github/workflows/pipeline.yml
+++ b/.github/workflows/pipeline.yml
@@ -116,7 +116,7 @@ jobs:
       contents: read
     # attested-delivery/.github main @ ca91728 (2026-06-23)
     uses: >-
-      attested-delivery/.github/.github/workflows/pin-check.yml@ca91728c87beb08742325b4ed4d06fcfb261435b
+      attested-delivery/.github/.github/workflows/pin-check.yml@ee1f93b566abc109efa0588d3d5308b4dd4a7492
 
   # -----------------------------------------------------------
   # Docker — after CI; PR = build-only, push on main/tags