From 30b55efe1a39dab879a953e568cea41662efaf89 Mon Sep 17 00:00:00 2001
From: mayurrawte <mayur@shipthis.co>
Date: Wed, 21 Oct 2026 12:22:47 +0530
Subject: [PATCH] ci: shared SherlockQA review workflow for org repos

---
 .github/workflows/sherlock.yml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 .github/workflows/sherlock.yml

diff --git a/.github/workflows/sherlock.yml b/.github/workflows/sherlock.yml
new file mode 100644
index 0000000..dab3ae8
--- /dev/null
+++ b/.github/workflows/sherlock.yml
@@ -0,0 +1,29 @@
+name: Sherlock Review
+
+on:
+  workflow_call:
+    inputs:
+      runs-on:
+        type: string
+        default: ubuntu-latest
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  review:
+    name: SherlockQA Review
+    # Dependabot PRs get no Actions secrets, so the review could only fail there.
+    if: github.actor != 'dependabot[bot]'
+    runs-on: ${{ inputs.runs-on }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: mayurrawte/SherlockQA@v1.4.0
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          ai-provider: bedrock
+          bedrock-api-key: ${{ secrets.BEDROCK_API_KEY }}
+          aws-region: us-east-1
+          model: us.anthropic.claude-sonnet-4-6