steve/executus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
50 Commits 5 Branches 11 Tags
133228675701f7dd39aa546b8ed8193cd86ce3cc
Commit Graph
3 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Steve DudenhoefferandClaude Opus 4.8 1332286757 ci: track gadfly's v1 release tag instead of a pinned sha
Adversarial Review (Gadfly) / review (pull_request) Successful in 1m54s
Details
executus CI / test (pull_request) Successful in 1m58s
Details 
Switch uses: steve/gadfly/.gitea/workflows/review-reusable.yml from a sha pin
(@b02b11d) to the moving @v1 release tag, so central swarm tuning propagates
without re-pinning this file each time. Tradeoff: v1 is mutable (re-moved on
deliberate releases), vs a sha which is immutable — accepted to cut re-pin churn.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
 2026-06-28 00:04:35 -04:00
Steve DudenhoefferandClaude Opus 4.8 1a2a2364ec security: scope forwarded secrets + pin gadfly reusable to an immutable sha
executus CI / test (pull_request) Successful in 2m13s
Details
Adversarial Review (Gadfly) / review (pull_request) Successful in 10m31s
Details 
Address the swarm's findings on this rollout:
- Replace `secrets: inherit` (which forwarded ALL repo secrets — registry/
  Komodo/Discord/DB creds the reviewer never uses) with explicit forwarding of
  only OLLAMA_CLOUD_API_KEY / CLAUDE_CODE_OAUTH_TOKEN / findings tokens.
  GITEA_TOKEN is the automatic job token (github.token in the reusable).
- Pin uses: ...@main -> @20a5c43 (immutable) so a push to gadfly can't change
  the code that runs with our forwarded secrets.

Requires gadfly's review-reusable.yml secrets contract (steve/gadfly#9, merged).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
 2026-06-27 21:18:59 -04:00
Steve DudenhoefferandClaude Opus 4.8 c08ce47fa6 ci: subscribe to gadfly's reusable review workflow (cloud + Claude Code, no local)
executus CI / test (pull_request) Successful in 47s
Details
Adversarial Review (Gadfly) / review (pull_request) Successful in 12m29s
Details 
Replace the full self-contained stub with a thin caller of steve/gadfly's
reusable workflow, using gadfly's own dogfood config: 6 cloud models +
the Claude Code engine (sonnet, opus, opus:max). No local Macs / foreman.
Advisory only.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
 2026-06-27 20:03:00 -04:00