diff --git a/.github/workflows/qualify-library.yml b/.github/workflows/qualify-library.yml
index 905b56c..ec3573a 100644
--- a/.github/workflows/qualify-library.yml
+++ b/.github/workflows/qualify-library.yml
@@ -35,7 +35,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           repository: ml4t/ecosystem
-          ref: 293400c8ef0dc487be319b3376140399868589eb
+          ref: 3e5e8c2674d3a5761260e591a346df6df60d14aa
           path: .ecosystem
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
@@ -62,7 +62,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           repository: ml4t/ecosystem
-          ref: 293400c8ef0dc487be319b3376140399868589eb
+          ref: 3e5e8c2674d3a5761260e591a346df6df60d14aa
           path: .ecosystem
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
@@ -87,7 +87,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           repository: ml4t/ecosystem
-          ref: 293400c8ef0dc487be319b3376140399868589eb
+          ref: 3e5e8c2674d3a5761260e591a346df6df60d14aa
           path: .ecosystem
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
diff --git a/tests/test_workflow_security.py b/tests/test_workflow_security.py
index a1b200c..d6d36f6 100644
--- a/tests/test_workflow_security.py
+++ b/tests/test_workflow_security.py
@@ -33,7 +33,7 @@ def test_shared_qualification_uses_current_policy_snapshot() -> None:
         Path(__file__).parents[1] / ".github" / "workflows" / "qualify-library.yml"
     ).read_text(encoding="utf-8")
 
-    policy_snapshot = "293400c8ef0dc487be319b3376140399868589eb"
+    policy_snapshot = "3e5e8c2674d3a5761260e591a346df6df60d14aa"
     refs = re.findall(r"^\s+ref: ([0-9a-f]{40})$", workflow, flags=re.MULTILINE)
 
     assert refs == [policy_snapshot, policy_snapshot, policy_snapshot]