feat(ci): require approval before running workflows from forks

last month

5564ad0

Authored

Madison7/30/2026, 12:30:43 AM

Maintainers can approve a fork PR head so CI is allowed for that SHA, with a banner and actions on the pull request page.

6 files changed

apps/web/app/[username]/[repository]/pulls/[number]/actions.ts+71−0
apps/web/app/[username]/[repository]/pulls/[number]/fork-ci-approval-banner.tsx+80−0
apps/web/app/[username]/[repository]/pulls/[number]/pull-request-detail.tsx+47−23
apps/web/db/pull-requests.ts+25−0
apps/web/lib/ci/ci-fork-approval.test.ts+45−0
apps/web/lib/ci/ci-fork-approval.ts+18−0

madison / open-git