fix(ci): restore reachable standards workflow pins

[hyperpolymath]

Replace the unreachable standards reusable-workflow commit 7fdc2705df74b4e352d2a1cde3e87a5923fdf329 with reachable standards main commit 092dedada188f56c5915f74a5fd40aac093742c3. The old SHA is an intermediate commit from squash-merged standards PR #596: it exists, but GitHub rejects it for cross-repository reusable workflows before creating jobs. This restores Hypatia/SARIF and the other affected workflows without weakening SHA pinning or branch protection. Estate incident: 251 active workflow files across 70 repositories in hyperpolymath and metadatastician.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: 36ca8f69-c6f4-45cf-b44f-f31b8f66ed63

📥 Commits

Reviewing files that changed from the base of the PR and between 2c878f1 and 8a71ef1.

📒 Files selected for processing (2)

• .github/workflows/governance.yml
• .github/workflows/hypatia-scan.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (3)

• GitHub Check: Analyze (actions)
• GitHub Check: lint-workflows
• GitHub Check: lint-workflows

🔇 Additional comments (2)

.github/workflows/governance.yml (1)

34-34: LGTM!

.github/workflows/hypatia-scan.yml (1)

28-28: LGTM!

---

📝 Summary

Summary by CodeRabbit

• Chores
  • Updated the automated governance checks to use the latest approved workflow version.
  • Updated the automated security scanning checks to use the latest approved workflow version.
  • No changes to application functionality, user-facing features, workflow triggers, permissions, or concurrency settings.

Walkthrough

The governance and Hypatia scan workflows now pin their reusable workflows to commit 092dedada188f56c5915f74a5fd40aac093742c3 in the shared standards repository.

Changes

Workflow pin updates

Layer / File(s)	Summary
Update reusable workflow pins .github/workflows/governance.yml, .github/workflows/hypatia-scan.yml	Both reusable workflow references now use commit 092dedada188f56c5915f74a5fd40aac093742c3 instead of the previous pinned commit.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 8a71e

The governance and Hypatia scan workflows now use the intended reachable pinned standards revision, restoring their reusable workflow references without changing workflow behavior or permissions.

Poem

A rabbit checks the workflow trail
Two pins move on a newer rail
Governance hops in line
Hypatia follows fine
The commit stays fixed and clear
No loose ends remain here

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description check	✅ Passed	The description directly explains the replacement of the unreachable reusable-workflow commit and the restoration of affected workflows.
Title check	✅ Passed	The title clearly and concisely summarises the main change: restoring reachable standards workflow pins in CI.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}