executus

4 Commits

Author	SHA1	Message	Date
Steve Dudenhoeffer	b25a13ed4f	chore: repin gadfly reusable to @5007597 (structured findings + consensus + inline review) Adopts gadfly's review-representation overhaul: one ranked consensus comment across the swarm + an advisory COMMENT-state inline PR review, on image sha-3095ebf. Swarm config still rides the owner variables. [skip ci]	2026-06-28 22:13:24 -04:00
Steve DudenhoefferandClaude Opus 4.8	7a5eebc468	fix(ci): restore valid adversarial-review.yml + pin gadfly reusable @7bc3c98 [skip ci] The reusable now reads swarm config from user-scope vars (GADFLY_DEFAULT_* + GADFLY_ENDPOINT_*); this immutable @sha bumps past the long-lived-runner ref cache so the vars-config reusable is adopted. Direct to main + [skip ci] to avoid triggering the review swarm. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-06-28 02:05:28 -04:00
Steve DudenhoefferandClaude Opus 4.8	1a2a2364ec	security: scope forwarded secrets + pin gadfly reusable to an immutable sha executus CI / test (pull_request) Successful in 2m13s Details Adversarial Review (Gadfly) / review (pull_request) Successful in 10m31s Details Address the swarm's findings on this rollout: - Replace `secrets: inherit` (which forwarded ALL repo secrets — registry/ Komodo/Discord/DB creds the reviewer never uses) with explicit forwarding of only OLLAMA_CLOUD_API_KEY / CLAUDE_CODE_OAUTH_TOKEN / findings tokens. GITEA_TOKEN is the automatic job token (github.token in the reusable). - Pin uses: ...@main -> @20a5c43 (immutable) so a push to gadfly can't change the code that runs with our forwarded secrets. Requires gadfly's review-reusable.yml secrets contract (steve/gadfly#9, merged). Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-06-27 21:18:59 -04:00
Steve DudenhoefferandClaude Opus 4.8	c08ce47fa6	ci: subscribe to gadfly's reusable review workflow (cloud + Claude Code, no local) executus CI / test (pull_request) Successful in 47s Details Adversarial Review (Gadfly) / review (pull_request) Successful in 12m29s Details Replace the full self-contained stub with a thin caller of steve/gadfly's reusable workflow, using gadfly's own dogfood config: 6 cloud models + the Claude Code engine (sonnet, opus, opus:max). No local Macs / foreman. Advisory only. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-06-27 20:03:00 -04:00