diff --git a/.gitea/workflows/adversarial-review.yml b/.gitea/workflows/adversarial-review.yml index 5b74aa4..221b6b2 100644 --- a/.gitea/workflows/adversarial-review.yml +++ b/.gitea/workflows/adversarial-review.yml @@ -41,7 +41,7 @@ jobs: # Tracks gadfly's v1 release tag — a curated pointer re-moved on each release # (unlike @main, which moves on every push). Central swarm tuning propagates # here automatically; the tradeoff vs a full sha pin is that v1 is mutable. - uses: steve/gadfly/.gitea/workflows/review-reusable.yml@b6a33dc218b493f9a1b9be29fda1f1487e2a896f + uses: steve/gadfly/.gitea/workflows/review-reusable.yml@f542d4e1cdc1ffe0ed0020f6398999ef9fabd682 # Least privilege: forward only the review secrets (not `secrets: inherit`, # which would expose every repo secret). GITEA_TOKEN is the automatic token. secrets: