From ec9b9a9a94499cca7378a0d3046d7a23b9d483af Mon Sep 17 00:00:00 2001 From: Steve Dudenhoeffer Date: Sat, 27 Jun 2026 22:26:13 -0400 Subject: [PATCH] ci: inherit gadfly's default swarm (slim caller, re-pin @b02b11d) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit steve/gadfly#10 moved the curated swarm (3 cloud + Claude Code sonnet/opus/ opus:max, 5-lens suite) into the reusable workflow's input defaults. Drop this repo's explicit `with:` swarm block and inherit it — only the consumer-specific allow-list remains. Re-pin to the post-merge gadfly commit (@b02b11d). Co-Authored-By: Claude Opus 4.8 (1M context) --- .gitea/workflows/adversarial-review.yml | 25 +++++++++---------------- 1 file changed, 9 insertions(+), 16 deletions(-) diff --git a/.gitea/workflows/adversarial-review.yml b/.gitea/workflows/adversarial-review.yml index 40b9f4e..4e6dd4b 100644 --- a/.gitea/workflows/adversarial-review.yml +++ b/.gitea/workflows/adversarial-review.yml @@ -1,10 +1,8 @@ -# Gadfly adversarial review — subscribes to steve/gadfly's reusable workflow. -# A curated swarm: 3 strong cloud models (minimax-m3, glm-5.2, deepseek-v4-pro) -# + the Claude Code engine (sonnet, opus, opus:max) — all three claudes run -# concurrently (claude-code=3). Every model runs the 5-lens default suite -# (security, correctness, maintainability, performance, error-handling); lenses -# are global, so this applies to the cloud AND claude models. No local Macs. -# Advisory only — never blocks a merge. +# Gadfly adversarial review — subscribes to steve/gadfly's reusable workflow and +# INHERITS its default swarm (3 cloud models + Claude Code sonnet/opus/opus:max, +# 5-lens suite). This stub holds only the triggers, the actor gate, secret +# forwarding, and the allow-list; the swarm config lives centrally in gadfly's +# review-reusable.yml. Advisory only — never blocks a merge. name: Adversarial Review (Gadfly) @@ -41,19 +39,14 @@ jobs: || github.actor == 'dazed')) # Pinned to an immutable gadfly commit (not @main): a push to gadfly can't # silently change the code that runs with our forwarded secrets. - uses: steve/gadfly/.gitea/workflows/review-reusable.yml@20a5c431f22d43bab0f711c14ce74de3a735c110 - # Least privilege: forward ONLY the secrets this swarm uses (GITEA_TOKEN is auto). + uses: steve/gadfly/.gitea/workflows/review-reusable.yml@b02b11d69139843665da4cdbf776bc0b3583490d + # Least privilege: forward ONLY the secrets the swarm uses (GITEA_TOKEN is auto). secrets: OLLAMA_CLOUD_API_KEY: ${{ secrets.OLLAMA_CLOUD_API_KEY }} CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} GADFLY_FINDINGS_URL: ${{ secrets.GADFLY_FINDINGS_URL }} GADFLY_FINDINGS_TOKEN: ${{ secrets.GADFLY_FINDINGS_TOKEN }} with: - models: "minimax-m3:cloud,glm-5.2:cloud,deepseek-v4-pro:cloud,claude-code/sonnet,claude-code/opus,claude-code/opus:max" - specialists: "security,correctness,maintainability,performance,error-handling" - provider_concurrency: "ollama-cloud=3,claude-code=3" - provider_lens_concurrency: "ollama-cloud=3" - timeout_secs: "600" - max_steps: "14" + # Inherit the default swarm from gadfly's review-reusable.yml; only the + # consumer-specific allow-list is set here. allowed_users: "steve,fizi,dazed" - timeout_minutes: 90