diff --git a/.gitea/workflows/adversarial-review.yml b/.gitea/workflows/adversarial-review.yml index 3b52478..888373d 100644 --- a/.gitea/workflows/adversarial-review.yml +++ b/.gitea/workflows/adversarial-review.yml @@ -42,7 +42,7 @@ jobs: # and cache the reusable-workflow ref, so a moved v1 tag keeps resolving to the # stale cached copy. A unique sha forces a cache miss → fresh fetch. Bump this # sha to adopt central swarm changes. - uses: steve/gadfly/.gitea/workflows/review-reusable.yml@3664ce858da1e7ba949baf675f7f3b249b8e7998 + uses: steve/gadfly/.gitea/workflows/review-reusable.yml@8eb0265e759e8c37ade8eaa8cb4b3aa9c7a5a169 # Least privilege: forward only the review secrets (not `secrets: inherit`, # which would expose every repo secret). GITEA_TOKEN is the automatic token. secrets: @@ -53,3 +53,6 @@ jobs: with: # Consumer-specific allow-list; everything else is inherited. allowed_users: "steve,fizi,dazed" + # Gitea >= 1.27 does not propagate dispatch inputs into a called workflow's + # github.event — thread the PR number explicitly (empty on non-dispatch events). + pr_number: ${{ github.event.inputs.pr_number }}