Skip to content

Conversation

@michaelphamcf
Copy link
Contributor

Summary

Add workflow_dispatch trigger to main CI workflow and configure dependabot workflow to explicitly trigger CI after auto-merge.

Description

  • Added workflow_dispatch to main.yaml to allow manual workflow triggering
  • Updated dependabot-approve-and-request-merge.yaml to retrieve Vault secrets and trigger CI workflow after merge
  • Pinned GitHub Actions to commit SHAs for security

Motivation and Context

When dependabot PRs are auto-merged, the workflow token used doesn't trigger push-based workflows by design. This change explicitly triggers the CI workflow after merge.

PR Checklist

  • I have read the CONTRIBUTING.md file
  • All commits follow conventional commits
  • Documentation is updated (if necessary)
  • PR doesn't contain any sensitive information
  • There are no breaking changes

@michaelphamcf michaelphamcf requested a review from a team as a code owner January 29, 2026 00:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants