diff --git a/.github/workflows/gate-attestation.yml b/.github/workflows/gate-attestation.yml
index f23e0d6..927f34c 100644
--- a/.github/workflows/gate-attestation.yml
+++ b/.github/workflows/gate-attestation.yml
@@ -78,7 +78,7 @@ permissions:
 
 jobs:
   gate:
-    uses: forkwright/.github/.github/workflows/hybrid-gate.yml@df92942bcc41cc7ffd0339b75b2f01e52269d0ef # main
+    uses: forkwright/.github/.github/workflows/hybrid-gate.yml@d74efb1d2d87ec86717dad5d42d468f6e3cf7994 # main
     with:
       # WHY defaults kept as-is: epistole has its own rust-toolchain.toml
       # (channel = "1.94.0", pinned per #70) -- auto-detect applies, no