From be2e6c3a21021f7a82889915af4dfc0007dac79b Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Thu, 22 Oct 2026 20:44:40 +0000
Subject: [PATCH] ci: pin governance engine with redacted bypass reporting

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/github-governance-dry-run.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/github-governance-dry-run.yml b/.github/workflows/github-governance-dry-run.yml
index 1a6538d..1ec1855 100644
--- a/.github/workflows/github-governance-dry-run.yml
+++ b/.github/workflows/github-governance-dry-run.yml
@@ -42,7 +42,7 @@ jobs:
           persist-credentials: false
 
       - name: Plan repository governance (read only)
-        uses: LibreCodeCoop/github-governance@3a02c8635a589f7213abd422a4d8b250a92e7ced # public planning support; pin immutable commit
+        uses: LibreCodeCoop/github-governance@0cbd31b136c0a1dd7dcaf805924aacd3e9f0ba71 # public planning support; pin immutable commit
         with:
           token: ${{ github.token }}
           organization: ${{ inputs.repository == '' && 'LibreSign' || '' }}
@@ -77,7 +77,7 @@ jobs:
           permission-administration: write
 
       - name: Apply repository governance
-        uses: LibreCodeCoop/github-governance@3a02c8635a589f7213abd422a4d8b250a92e7ced # public planning support; pin immutable commit
+        uses: LibreCodeCoop/github-governance@0cbd31b136c0a1dd7dcaf805924aacd3e9f0ba71 # public planning support; pin immutable commit
         with:
           token: ${{ steps.app-token.outputs.token }}
           organization: ${{ inputs.repository == '' && 'LibreSign' || '' }}