feat(ci): bulletproof gemini-review workflow by removing tools whitelists and using default toolbox (google#124)

DeanChensj · web-flow · commit 57df5aaec420 · 2026-05-04T21:01:15.000-07:00
diff --git a/.github/workflows/gemini-review.yml b/.github/workflows/gemini-review.yml
@@ -96,4 +96,4 @@ jobs:
                 }
               }
             }
-          prompt: 'Please use the pull_request_read tool to read this PR. Analyze the code for bugs, security issues, and best practices. Then, use the add_comment_to_pending_review and pull_request_review_write tools to post your review directly.'
+          prompt: 'Please use the pull_request_read tool to read pull request #${{ github.event.pull_request.number || github.event.issue.number }}. Analyze the code for bugs, security issues, and best practices. Then, use the add_comment_to_pending_review and pull_request_review_write tools to post your review directly on pull request #${{ github.event.pull_request.number || github.event.issue.number }}.'

Original file line number	Diff line number	Diff line change
`@@ -96,4 +96,4 @@ jobs:`
`96`	`96`	`}`
`97`	`97`	`}`
`98`	`98`	`}`
`99`		`- prompt: 'Please use the pull_request_read tool to read this PR. Analyze the code for bugs, security issues, and best practices. Then, use the add_comment_to_pending_review and pull_request_review_write tools to post your review directly.'`
	`99`	`+ prompt: 'Please use the pull_request_read tool to read pull request #${{ github.event.pull_request.number \|\| github.event.issue.number }}. Analyze the code for bugs, security issues, and best practices. Then, use the add_comment_to_pending_review and pull_request_review_write tools to post your review directly on pull request #${{ github.event.pull_request.number \|\| github.event.issue.number }}.'`