1 Commits

Author SHA1 Message Date
Steve Dudenhoeffer ec9b9a9a94 ci: inherit gadfly's default swarm (slim caller, re-pin @b02b11d)
CI / Tidy (pull_request) Successful in 9m26s
CI / Build & Test (pull_request) Successful in 9m56s
steve/gadfly#10 moved the curated swarm (3 cloud + Claude Code sonnet/opus/
opus:max, 5-lens suite) into the reusable workflow's input defaults. Drop this
repo's explicit `with:` swarm block and inherit it — only the consumer-specific
allow-list remains. Re-pin to the post-merge gadfly commit (@b02b11d).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-27 22:26:13 -04:00
+9 -16
View File
@@ -1,10 +1,8 @@
# Gadfly adversarial review — subscribes to steve/gadfly's reusable workflow.
# A curated swarm: 3 strong cloud models (minimax-m3, glm-5.2, deepseek-v4-pro)
# + the Claude Code engine (sonnet, opus, opus:max) — all three claudes run
# concurrently (claude-code=3). Every model runs the 5-lens default suite
# (security, correctness, maintainability, performance, error-handling); lenses
# are global, so this applies to the cloud AND claude models. No local Macs.
# Advisory only — never blocks a merge.
# Gadfly adversarial review — subscribes to steve/gadfly's reusable workflow and
# INHERITS its default swarm (3 cloud models + Claude Code sonnet/opus/opus:max,
# 5-lens suite). This stub holds only the triggers, the actor gate, secret
# forwarding, and the allow-list; the swarm config lives centrally in gadfly's
# review-reusable.yml. Advisory only — never blocks a merge.
name: Adversarial Review (Gadfly)
@@ -41,19 +39,14 @@ jobs:
|| github.actor == 'dazed'))
# Pinned to an immutable gadfly commit (not @main): a push to gadfly can't
# silently change the code that runs with our forwarded secrets.
uses: steve/gadfly/.gitea/workflows/review-reusable.yml@20a5c431f22d43bab0f711c14ce74de3a735c110
# Least privilege: forward ONLY the secrets this swarm uses (GITEA_TOKEN is auto).
uses: steve/gadfly/.gitea/workflows/review-reusable.yml@b02b11d69139843665da4cdbf776bc0b3583490d
# Least privilege: forward ONLY the secrets the swarm uses (GITEA_TOKEN is auto).
secrets:
OLLAMA_CLOUD_API_KEY: ${{ secrets.OLLAMA_CLOUD_API_KEY }}
CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
GADFLY_FINDINGS_URL: ${{ secrets.GADFLY_FINDINGS_URL }}
GADFLY_FINDINGS_TOKEN: ${{ secrets.GADFLY_FINDINGS_TOKEN }}
with:
models: "minimax-m3:cloud,glm-5.2:cloud,deepseek-v4-pro:cloud,claude-code/sonnet,claude-code/opus,claude-code/opus:max"
specialists: "security,correctness,maintainability,performance,error-handling"
provider_concurrency: "ollama-cloud=3,claude-code=3"
provider_lens_concurrency: "ollama-cloud=3"
timeout_secs: "600"
max_steps: "14"
# Inherit the default swarm from gadfly's review-reusable.yml; only the
# consumer-specific allow-list is set here.
allowed_users: "steve,fizi,dazed"
timeout_minutes: 90