steve/majordomo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'ci(gadfly): repin to @8adeeea' (#29) from ci/gadfly-repin into main
CI / Tidy (push) Successful in 9m25s
Details
CI / Build & Test (push) Successful in 10m3s
Details

Browse Source
This commit was merged in pull request #29.
This commit is contained in:
steve
2026-08-22 03:29:39 +00:00
parent 85561ab477 e05bbe0b13
commit 43f914a673
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/adversarial-review.yml
+11 -1
View File
@@ -42,7 +42,17 @@ jobs:
# and cache the reusable-workflow ref, so a moved v1 tag keeps resolving to the # and cache the reusable-workflow ref, so a moved v1 tag keeps resolving to the
# stale cached copy. A unique sha forces a cache miss → fresh fetch. Bump this # stale cached copy. A unique sha forces a cache miss → fresh fetch. Bump this
# sha to adopt central swarm changes. # sha to adopt central swarm changes.
uses: steve/gadfly/.gitea/workflows/review-reusable.yml@c9dab69d143cb614c1840a5b06d6ffc358f4752d #
# NB: the reviewer IMAGE tag is no longer part of this pin. From @8adeeea on,
# the reusable workflow resolves it per run as
# `inputs.reviewer_tag || vars.GADFLY_REVIEWER_TAG || 'sha-b850e35'`, so
# retagging the reviewer is a user-scope variable edit with no commit here.
# The previous pin (@c9dab69d) hardcoded `docker://…gadfly:sha-b37cd09`, a tag
# that was never pushed to the registry — every review in this repo died in
# ~1s on "failed to resolve reference … not found", which reads exactly like a
# review that found nothing. Before bumping this pin again, check the tag its
# fallback names is really in the registry.
uses: steve/gadfly/.gitea/workflows/review-reusable.yml@8adeeeabe0738a797a1bdfc42c5176ea8ee627e4
# Least privilege: forward only the review secrets (not `secrets: inherit`, # Least privilege: forward only the review secrets (not `secrets: inherit`,
# which would expose every repo secret). GITEA_TOKEN is the automatic token. # which would expose every repo secret). GITEA_TOKEN is the automatic token.
secrets: secrets: