diff --git a/.gitea/workflows/adversarial-review.yml b/.gitea/workflows/adversarial-review.yml index bb2a12c..36abf92 100644 --- a/.gitea/workflows/adversarial-review.yml +++ b/.gitea/workflows/adversarial-review.yml @@ -42,7 +42,7 @@ jobs: # and cache the reusable-workflow ref, so a moved v1 tag keeps resolving to the # stale cached copy. A unique sha forces a cache miss → fresh fetch. Bump this # sha to adopt central swarm changes. - uses: steve/gadfly/.gitea/workflows/review-reusable.yml@0d518794507ab5fb349887679c931888c5ca2669 + uses: steve/gadfly/.gitea/workflows/review-reusable.yml@c9dab69d143cb614c1840a5b06d6ffc358f4752d # Least privilege: forward only the review secrets (not `secrets: inherit`, # which would expose every repo secret). GITEA_TOKEN is the automatic token. secrets: