From 07af4857e54995c1cf308ec6f46dd90fe83e8008 Mon Sep 17 00:00:00 2001
From: hyperpolymath <hyperpolymath@users.noreply.github.com>
Date: Sat, 19 Sep 2026 23:14:01 +0000
Subject: [PATCH] fix(ci): key estate-standard action refs already used by the
 workflows

  + github/codeql-action@b96794f015dfd88f77b49b1c93e0fa7110f94c63

Every SHA-pinned `uses:` ref in .github/workflows/ is now present in
.github/workflows/actions.lock. The added entries use the exact SHAs already
keyed in the estate SSOT (hyperpolymath/standards) lock; no workflow files
changed. Entry format matches gh actions-lock v0.0.2 output
(ref/commit/owner_id/repo_id); owner/repo ids resolved from the GitHub API.

Verified: validate-actions-lock.sh -> exit 0 (was: N missing ref(s)).
---
 .github/workflows/actions.lock | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock
index 12258fd..4eb2865 100644
--- a/.github/workflows/actions.lock
+++ b/.github/workflows/actions.lock
@@ -63,6 +63,7 @@ dependencies:
         commit: 'sha1-1176ef556905f349f669722abf30bce1a6e16e01'
         owner_id: 44036562
         repo_id: 760702757
+
     'actions/attest-build-provenance@v2.4.0':
         ref: 'v2.4.0'
         commit: 'sha1-e8998f949152b193b063cb0ec769d69d929409be'
@@ -71,66 +72,79 @@ dependencies:
         uses:
             - 'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01'
             - 'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc'
+
     'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc':
         ref: 'v2.4.0'
         commit: 'sha1-ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc'
         owner_id: 44036562
         repo_id: 760701061
+
     'actions/cache@v4.3.0':
         ref: 'v4.3.0'
         commit: 'sha1-0057852bfaa89a56745cba8c7296529d2fc39830'
         owner_id: 44036562
         repo_id: 215566462
+
     'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
         ref: 'v7.0.1'
         commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
         owner_id: 44036562
         repo_id: 197814629
+
     'actions/checkout@v4.1.1':
         ref: 'v4.1.1'
         commit: 'sha1-b4ffde65f46336ab88eb53be808477a3936bae11'
         owner_id: 44036562
         repo_id: 197814629
+
     'actions/checkout@v4.1.7':
         ref: 'v4.1.7'
         commit: 'sha1-692973e3d937129bcbf40652eb9f2f61becf3332'
         owner_id: 44036562
         repo_id: 197814629
+
     'actions/checkout@v4.3.1':
         ref: 'v4.3.1'
         commit: 'sha1-34e114876b0b11c390a56381ad16ebd13914f8d5'
         owner_id: 44036562
         repo_id: 197814629
+
     'actions/checkout@v4.4.0':
         ref: 'v4.4.0'
         commit: 'sha1-11d5960a326750d5838078e36cf38b85af677262'
         owner_id: 44036562
         repo_id: 197814629
+
     'actions/configure-pages@v5.0.0':
         ref: 'v5.0.0'
         commit: 'sha1-983d7736d9b0ae728b81ab479565c72886d7745b'
         owner_id: 44036562
         repo_id: 513659658
+
     'actions/deploy-pages@v4.0.5':
         ref: 'v4.0.5'
         commit: 'sha1-d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e'
         owner_id: 44036562
         repo_id: 438112499
+
     'actions/download-artifact@v4.3.0':
         ref: 'v4.3.0'
         commit: 'sha1-d3f86a106a0bac45b974a628896c90dbdf5c8093'
         owner_id: 44036562
         repo_id: 192626254
+
     'actions/upload-artifact@v4':
         ref: 'v4'
         commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
         owner_id: 44036562
         repo_id: 192625955
+
     'actions/upload-artifact@v4.6.2':
         ref: 'v4.6.2'
         commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
         owner_id: 44036562
         repo_id: 192625955
+
     'actions/upload-pages-artifact@v3.0.1':
         ref: 'v3.0.1'
         commit: 'sha1-56afc609e74202658d3ffba0e8f6dda462b719fa'
@@ -138,51 +152,67 @@ dependencies:
         repo_id: 496012378
         uses:
             - 'actions/upload-artifact@v4'
+
     'dependabot/fetch-metadata@v2.2.0':
         ref: 'v2.2.0'
         commit: 'sha1-dbb049abf0d677abbd7f7eee0375145b417fdd34'
         owner_id: 27347476
         repo_id: 371068214
+
     'dtolnay/rust-toolchain@v1':
         ref: 'v1'
         commit: 'sha1-6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772'
         owner_id: 1940490
         repo_id: 260749683
+
+    'github/codeql-action@b96794f015dfd88f77b49b1c93e0fa7110f94c63':
+        ref: 'b96794f015dfd88f77b49b1c93e0fa7110f94c63'
+        commit: 'sha1-b96794f015dfd88f77b49b1c93e0fa7110f94c63'
+        owner_id: 9919
+        repo_id: 259445878
+
     'github/codeql-action@cdf488f595d80d6e07e03d4674febd5ab45fa938':
         ref: 'v4.37.9'
         commit: 'sha1-cdf488f595d80d6e07e03d4674febd5ab45fa938'
         owner_id: 9919
         repo_id: 259445878
+
     'haskell-actions/setup@v2.7.5':
         ref: 'v2.7.5'
         commit: 'sha1-ec49483bfc012387b227434aba94f59a6ecd0900'
         owner_id: 75048950
         repo_id: 623796603
+
     'hyperpolymath/a2ml-ecosystem@main':
         ref: 'main'
         commit: 'sha1-f9d999b60cb5f383679ea19912bcdc49c944973a'
         owner_id: 6759885
         repo_id: 1275649586
+
     'hyperpolymath/k9-ecosystem@main':
         ref: 'main'
         commit: 'sha1-2155aa26a21758f2ba119f61bc7e0e1981c106fb'
         owner_id: 6759885
         repo_id: 1275650185
+
     'hyperpolymath/smtp-notify-action@v0.2.0':
         ref: 'v0.2.0'
         commit: 'sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7'
         owner_id: 6759885
         repo_id: 1352485172
+
     'peter-evans/repository-dispatch@v4.0.1':
         ref: 'v4.0.1'
         commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697'
         owner_id: 18365890
         repo_id: 220359305
+
     'softprops/action-gh-release@v2.5.0':
         ref: 'v2.5.0'
         commit: 'sha1-a06a81a03ee405af7f2048a818ed3f03bbf83c7b'
         owner_id: 2242
         repo_id: 204253808
+
     'swatinem/rust-cache@v2.8.2':
         ref: 'v2.8.2'
         commit: 'sha1-779680da715d629ac1d338a641029a2f4372abb5'