ci: inherit gadfly's default swarm (slim caller, re-pin @b02b11d)
steve/gadfly#10 moved the curated swarm (3 cloud + Claude Code sonnet/opus/ opus:max, 5-lens suite) into the reusable workflow's input defaults. Drop this repo's explicit `with:` swarm block and inherit it — only the consumer-specific allow-list remains. Re-pin to the post-#10 gadfly commit (@b02b11d). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -1,7 +1,8 @@
|
|||||||
# Gadfly adversarial review — subscribes to steve/gadfly's reusable workflow.
|
# Gadfly adversarial review — subscribes to steve/gadfly's reusable workflow and
|
||||||
# Mirrors gadfly's own dogfood config: 6 cloud models + the Claude Code engine
|
# INHERITS its default swarm (3 cloud models + Claude Code sonnet/opus/opus:max,
|
||||||
# (sonnet, opus, and opus with max extended thinking). No local Macs. Advisory
|
# 5-lens suite). This stub holds only the triggers, the actor gate, secret
|
||||||
# only — never blocks a merge.
|
# forwarding, and the allow-list; the swarm config lives centrally in gadfly's
|
||||||
|
# review-reusable.yml. Advisory only — never blocks a merge.
|
||||||
|
|
||||||
name: Adversarial Review (Gadfly)
|
name: Adversarial Review (Gadfly)
|
||||||
|
|
||||||
@@ -38,19 +39,14 @@ jobs:
|
|||||||
|| github.actor == 'dazed'))
|
|| github.actor == 'dazed'))
|
||||||
# Pinned to an immutable gadfly commit (not @main): a push to gadfly can't
|
# Pinned to an immutable gadfly commit (not @main): a push to gadfly can't
|
||||||
# silently change the code that runs with our forwarded secrets.
|
# silently change the code that runs with our forwarded secrets.
|
||||||
uses: steve/gadfly/.gitea/workflows/review-reusable.yml@20a5c431f22d43bab0f711c14ce74de3a735c110
|
uses: steve/gadfly/.gitea/workflows/review-reusable.yml@b02b11d69139843665da4cdbf776bc0b3583490d
|
||||||
# Least privilege: forward ONLY the secrets this swarm uses (GITEA_TOKEN is auto).
|
# Least privilege: forward ONLY the secrets the swarm uses (GITEA_TOKEN is auto).
|
||||||
secrets:
|
secrets:
|
||||||
OLLAMA_CLOUD_API_KEY: ${{ secrets.OLLAMA_CLOUD_API_KEY }}
|
OLLAMA_CLOUD_API_KEY: ${{ secrets.OLLAMA_CLOUD_API_KEY }}
|
||||||
CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
|
CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
|
||||||
GADFLY_FINDINGS_URL: ${{ secrets.GADFLY_FINDINGS_URL }}
|
GADFLY_FINDINGS_URL: ${{ secrets.GADFLY_FINDINGS_URL }}
|
||||||
GADFLY_FINDINGS_TOKEN: ${{ secrets.GADFLY_FINDINGS_TOKEN }}
|
GADFLY_FINDINGS_TOKEN: ${{ secrets.GADFLY_FINDINGS_TOKEN }}
|
||||||
with:
|
with:
|
||||||
models: "minimax-m3:cloud,glm-5.2:cloud,glm-5.1:cloud,deepseek-v4-pro:cloud,nemotron-3-super:cloud,qwen3-coder:480b-cloud,claude-code/sonnet,claude-code/opus,claude-code/opus:max"
|
# Inherit the default swarm from gadfly's review-reusable.yml; only the
|
||||||
specialists: "security,correctness,error-handling"
|
# consumer-specific allow-list is set here.
|
||||||
provider_concurrency: "ollama-cloud=3,claude-code=2"
|
|
||||||
provider_lens_concurrency: "ollama-cloud=3"
|
|
||||||
timeout_secs: "600"
|
|
||||||
max_steps: "14"
|
|
||||||
allowed_users: "steve,fizi,dazed"
|
allowed_users: "steve,fizi,dazed"
|
||||||
timeout_minutes: 90
|
|
||||||
|
|||||||
Reference in New Issue
Block a user