From d054f68461cfd2685926d8c2c2ab65011133250c Mon Sep 17 00:00:00 2001
From: vklimontovich <v@klimontovich.com>
Date: Mon, 20 Apr 2026 16:36:50 -0400
Subject: [PATCH] feat: declare workflow_call secrets explicitly

---
 .github/workflows/ai-review.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/ai-review.yml b/.github/workflows/ai-review.yml
index 8d4b103..af3a5ab 100644
--- a/.github/workflows/ai-review.yml
+++ b/.github/workflows/ai-review.yml
@@ -16,6 +16,13 @@ on:
         description: "Commit SHA to review (passed through from caller workflow_dispatch)."
         required: false
         type: string
+    secrets:
+      OPENAI_API_KEY:
+        required: true
+      AI_CODE_REVIEW_APP_ID:
+        required: false
+      AI_CODE_REVIEW_PRIVATE_KEY:
+        required: false
   pull_request:
     types:
       - opened