diff --git a/.github/workflows/quality-gates.yml b/.github/workflows/quality-gates.yml
index f7e38c1..07e6a74 100644
--- a/.github/workflows/quality-gates.yml
+++ b/.github/workflows/quality-gates.yml
@@ -116,7 +116,7 @@ jobs:
       security-events: write
       actions: read
     uses: >-
-      modeled-information-format/.github/.github/workflows/reusable-manifest-review.yml@05b13774259a17140419556a45a48ba6a3e36e0c
+      modeled-information-format/.github/.github/workflows/reusable-manifest-review.yml@667ee7b3bc93a8789c65cb9b4fedc6d827fcd36a
     with:
       directory: .
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 45f1cb4..8ed2425 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -170,7 +170,7 @@ jobs:
     needs: [meta]
     permissions: { contents: read, security-events: write, actions: read }
     uses: >-
-      modeled-information-format/.github/.github/workflows/reusable-manifest-review.yml@05b13774259a17140419556a45a48ba6a3e36e0c
+      modeled-information-format/.github/.github/workflows/reusable-manifest-review.yml@667ee7b3bc93a8789c65cb9b4fedc6d827fcd36a
   # --- seam attestations: bind each verdict to the tarball digest -------------
   attest-sast:
     needs: [meta, build, gate-sast]