diff --git a/.machine_readable/REGISTRY.a2ml b/.machine_readable/REGISTRY.a2ml
index ebf83637..6df7baf0 100644
--- a/.machine_readable/REGISTRY.a2ml
+++ b/.machine_readable/REGISTRY.a2ml
@@ -207,7 +207,7 @@ name = "RSR — Rhodium Standard Repositories"
 stream = "governance"
 home = "rhodium-standard-repositories/"
 canonical_doc = "rhodium-standard-repositories/README.adoc"
-source_hash = "sha256:741116848d8f17e375cfc22e1c801c693a00ca277f70237fc7cfd9514804922a"
+source_hash = "sha256:dbd52c26f0ca4964683db06045feda29710e44289baf5eb573ebf195a3ed44a9"
 route = "the repository-compliance standard every repo is graded against"
 
 [[spec]]
diff --git a/rhodium-standard-repositories/actions-allowlist/allowed-actions.json b/rhodium-standard-repositories/actions-allowlist/allowed-actions.json
index 02bb7a06..eea64d35 100644
--- a/rhodium-standard-repositories/actions-allowlist/allowed-actions.json
+++ b/rhodium-standard-repositories/actions-allowlist/allowed-actions.json
@@ -62,6 +62,7 @@
     "julia-actions/setup-julia@*",
     "JuliaRegistries/TagBot@*",
     "KSXGitHub/github-actions-deploy-aur@*",
+    "leanprover/lean-action@*",
     "ludeeus/action-shellcheck@*",
     "lycheeverse/lychee-action@*",
     "mlugg/setup-zig@*",