steve/executus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: track gadfly's v1 release tag instead of a pinned sha
Adversarial Review (Gadfly) / review (pull_request) Successful in 1m54s
Details
executus CI / test (pull_request) Successful in 1m58s
Details

Browse Source 
Switch uses: steve/gadfly/.gitea/workflows/review-reusable.yml from a sha pin
(@b02b11d) to the moving @v1 release tag, so central swarm tuning propagates
without re-pinning this file each time. Tradeoff: v1 is mutable (re-moved on
deliberate releases), vs a sha which is immutable — accepted to cut re-pin churn.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Steve Dudenhoeffer
2026-06-28 00:04:35 -04:00
parent 56baac758d
commit 1332286757
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/adversarial-review.yml
+4 -3
View File
@@ -38,9 +38,10 @@ jobs:
&& (github.actor == 'steve' && (github.actor == 'steve'
|| github.actor == 'fizi' || github.actor == 'fizi'
|| github.actor == 'dazed')) || github.actor == 'dazed'))
# Pinned to an immutable gadfly commit (not @main): a push to gadfly can't # Tracks gadfly's v1 release tag — a curated pointer re-moved on each release
# silently change the code that runs with our forwarded secrets. # (unlike @main, which moves on every push). Central swarm tuning propagates
uses: steve/gadfly/.gitea/workflows/review-reusable.yml@b02b11d69139843665da4cdbf776bc0b3583490d # here automatically; the tradeoff vs a full sha pin is that v1 is mutable.
uses: steve/gadfly/.gitea/workflows/review-reusable.yml@v1
# Least privilege: forward only the review secrets (not `secrets: inherit`, # Least privilege: forward only the review secrets (not `secrets: inherit`,
# which would expose every repo secret). GITEA_TOKEN is the automatic token. # which would expose every repo secret). GITEA_TOKEN is the automatic token.
secrets: secrets: