executus

48 Commits 5 Branches 11 Tags

3 Commits

Author	SHA1	Message	Date
Steve DudenhoefferandClaude Opus 4.8	3d21eaa3e0	ci: inherit gadfly's default swarm (slim caller, re-pin @b02b11d) steve/gadfly#10 moved the curated swarm (3 cloud + Claude Code sonnet/opus/ opus:max, 5-lens suite) into the reusable workflow's input defaults. Drop this repo's explicit `with:` swarm block and inherit it — only the consumer-specific allow-list remains. Re-pin to the post-merge gadfly commit (@b02b11d). Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-06-27 22:26:13 -04:00
Steve DudenhoefferandClaude Opus 4.8	1a2a2364ec	security: scope forwarded secrets + pin gadfly reusable to an immutable sha executus CI / test (pull_request) Successful in 2m13s Details Adversarial Review (Gadfly) / review (pull_request) Successful in 10m31s Details Address the swarm's findings on this rollout: - Replace `secrets: inherit` (which forwarded ALL repo secrets — registry/ Komodo/Discord/DB creds the reviewer never uses) with explicit forwarding of only OLLAMA_CLOUD_API_KEY / CLAUDE_CODE_OAUTH_TOKEN / findings tokens. GITEA_TOKEN is the automatic job token (github.token in the reusable). - Pin uses: ...@main -> @20a5c43 (immutable) so a push to gadfly can't change the code that runs with our forwarded secrets. Requires gadfly's review-reusable.yml secrets contract (steve/gadfly#9, merged). Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-06-27 21:18:59 -04:00
Steve DudenhoefferandClaude Opus 4.8	c08ce47fa6	ci: subscribe to gadfly's reusable review workflow (cloud + Claude Code, no local) executus CI / test (pull_request) Successful in 47s Details Adversarial Review (Gadfly) / review (pull_request) Successful in 12m29s Details Replace the full self-contained stub with a thin caller of steve/gadfly's reusable workflow, using gadfly's own dogfood config: 6 cloud models + the Claude Code engine (sonnet, opus, opus:max). No local Macs / foreman. Advisory only. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-06-27 20:03:00 -04:00

Author

SHA1

Message

Date

Steve DudenhoefferandClaude Opus 4.8

3d21eaa3e0

ci: inherit gadfly's default swarm (slim caller, re-pin @b02b11d)

steve/gadfly#10 moved the curated swarm (3 cloud + Claude Code sonnet/opus/
opus:max, 5-lens suite) into the reusable workflow's input defaults. Drop this
repo's explicit `with:` swarm block and inherit it — only the consumer-specific
allow-list remains. Re-pin to the post-merge gadfly commit (@b02b11d).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-06-27 22:26:13 -04:00

Steve DudenhoefferandClaude Opus 4.8

1a2a2364ec

security: scope forwarded secrets + pin gadfly reusable to an immutable sha

executus CI / test (pull_request) Successful in 2m13s

Details

Adversarial Review (Gadfly) / review (pull_request) Successful in 10m31s

Details

Address the swarm's findings on this rollout:
- Replace `secrets: inherit` (which forwarded ALL repo secrets — registry/
  Komodo/Discord/DB creds the reviewer never uses) with explicit forwarding of
  only OLLAMA_CLOUD_API_KEY / CLAUDE_CODE_OAUTH_TOKEN / findings tokens.
  GITEA_TOKEN is the automatic job token (github.token in the reusable).
- Pin uses: ...@main -> @20a5c43 (immutable) so a push to gadfly can't change
  the code that runs with our forwarded secrets.

Requires gadfly's review-reusable.yml secrets contract (steve/gadfly#9, merged).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-06-27 21:18:59 -04:00

Steve DudenhoefferandClaude Opus 4.8

c08ce47fa6

ci: subscribe to gadfly's reusable review workflow (cloud + Claude Code, no local)

executus CI / test (pull_request) Successful in 47s

Details

Adversarial Review (Gadfly) / review (pull_request) Successful in 12m29s

Details

Replace the full self-contained stub with a thin caller of steve/gadfly's
reusable workflow, using gadfly's own dogfood config: 6 cloud models +
the Claude Code engine (sonnet, opus, opus:max). No local Macs / foreman.
Advisory only.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-06-27 20:03:00 -04:00