steve/majordomo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: inherit gadfly's default swarm (slim caller, re-pin @b02b11d)
CI / Tidy (pull_request) Successful in 9m26s
Details
CI / Build & Test (pull_request) Successful in 9m56s
Details

Browse Source 
steve/gadfly#10 moved the curated swarm (3 cloud + Claude Code sonnet/opus/
opus:max, 5-lens suite) into the reusable workflow's input defaults. Drop this
repo's explicit `with:` swarm block and inherit it — only the consumer-specific
allow-list remains. Re-pin to the post-merge gadfly commit (@b02b11d).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Steve Dudenhoeffer
2026-06-27 22:26:13 -04:00
parent ecf39087a9
commit ec9b9a9a94
1 changed files with 9 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/adversarial-review.yml
+9 -16
View File
@@ -1,10 +1,8 @@
# Gadfly adversarial review — subscribes to steve/gadfly's reusable workflow. # Gadfly adversarial review — subscribes to steve/gadfly's reusable workflow and
# A curated swarm: 3 strong cloud models (minimax-m3, glm-5.2, deepseek-v4-pro) # INHERITS its default swarm (3 cloud models + Claude Code sonnet/opus/opus:max,
# + the Claude Code engine (sonnet, opus, opus:max) — all three claudes run # 5-lens suite). This stub holds only the triggers, the actor gate, secret
# concurrently (claude-code=3). Every model runs the 5-lens default suite # forwarding, and the allow-list; the swarm config lives centrally in gadfly's
# (security, correctness, maintainability, performance, error-handling); lenses # review-reusable.yml. Advisory only — never blocks a merge.
# are global, so this applies to the cloud AND claude models. No local Macs.
# Advisory only — never blocks a merge.
name: Adversarial Review (Gadfly) name: Adversarial Review (Gadfly)
@@ -41,19 +39,14 @@ jobs:
|| github.actor == 'dazed')) || github.actor == 'dazed'))
# Pinned to an immutable gadfly commit (not @main): a push to gadfly can't # Pinned to an immutable gadfly commit (not @main): a push to gadfly can't
# silently change the code that runs with our forwarded secrets. # silently change the code that runs with our forwarded secrets.
uses: steve/gadfly/.gitea/workflows/review-reusable.yml@20a5c431f22d43bab0f711c14ce74de3a735c110 uses: steve/gadfly/.gitea/workflows/review-reusable.yml@b02b11d69139843665da4cdbf776bc0b3583490d
# Least privilege: forward ONLY the secrets this swarm uses (GITEA_TOKEN is auto). # Least privilege: forward ONLY the secrets the swarm uses (GITEA_TOKEN is auto).
secrets: secrets:
OLLAMA_CLOUD_API_KEY: ${{ secrets.OLLAMA_CLOUD_API_KEY }} OLLAMA_CLOUD_API_KEY: ${{ secrets.OLLAMA_CLOUD_API_KEY }}
CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
GADFLY_FINDINGS_URL: ${{ secrets.GADFLY_FINDINGS_URL }} GADFLY_FINDINGS_URL: ${{ secrets.GADFLY_FINDINGS_URL }}
GADFLY_FINDINGS_TOKEN: ${{ secrets.GADFLY_FINDINGS_TOKEN }} GADFLY_FINDINGS_TOKEN: ${{ secrets.GADFLY_FINDINGS_TOKEN }}
with: with:
models: "minimax-m3:cloud,glm-5.2:cloud,deepseek-v4-pro:cloud,claude-code/sonnet,claude-code/opus,claude-code/opus:max" # Inherit the default swarm from gadfly's review-reusable.yml; only the
specialists: "security,correctness,maintainability,performance,error-handling" # consumer-specific allow-list is set here.
provider_concurrency: "ollama-cloud=3,claude-code=3"
provider_lens_concurrency: "ollama-cloud=3"
timeout_secs: "600"
max_steps: "14"
allowed_users: "steve,fizi,dazed" allowed_users: "steve,fizi,dazed"
timeout_minutes: 90