From 46f5f31148bce248d56b511d66284e22f17f7c36 Mon Sep 17 00:00:00 2001
From: Luke Curley <kixelated@gmail.com>
Date: Fri, 13 Nov 2026 12:22:44 -0800
Subject: [PATCH] ci: add the Pullfrog workflow behind a main-only environment

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/pullfrog.yml | 37 ++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 .github/workflows/pullfrog.yml

diff --git a/.github/workflows/pullfrog.yml b/.github/workflows/pullfrog.yml
new file mode 100644
index 0000000..5d516c9
--- /dev/null
+++ b/.github/workflows/pullfrog.yml
@@ -0,0 +1,37 @@
+# PULLFROG ACTION - DO NOT EDIT EXCEPT WHERE INDICATED
+name: Pullfrog
+run-name: ${{ inputs.name || github.workflow }}
+on:
+  workflow_dispatch:
+    inputs:
+      prompt:
+        type: string
+        description: Agent prompt
+      name:
+        type: string
+        description: Run name
+
+permissions:
+  contents: read
+
+jobs:
+  pullfrog:
+    runs-on: ubuntu-latest
+    # Only main may deploy to this environment, so a dispatch on a pushed
+    # branch can't mint the OIDC token Pullfrog trades for model access.
+    environment: pullfrog
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 1
+          persist-credentials: false
+      - name: Run agent
+        uses: pullfrog/pullfrog@0741f79ecebfa4469a010644d2aed2d96d32d489 # v0.1.127
+        with:
+          prompt: ${{ inputs.prompt }}
+        # No provider keys from this repository: model access is configured
+        # in the Pullfrog console (https://docs.pullfrog.com/model-access).