Improvement

June 11, 20261 Minute Read

Bot-created pull requests can run workflows if approved

GitHub pull request created by a bot awaiting approval to run CI/CD workflows

Pull requests created by the github-actions[bot] are now able to run your CI/CD workflows with user approval. Requiring approval is a security measure to ensure generated code does not automatically run workflows which may have access to sensitive information. This matches the behavior of Copilot-generated pull requests.

Previously, pull requests generated by github-actions[bot] were not able to run CI/CD workflows, allowing pull requests to be accidentally merged without having gone through CI. This change allows all pull requests, even bot-generated changes, to run configured CI/CD workflows if approved by a user with write access to the repository.

Subscribe to our developer newsletter

Discover tips, technical guides, and best practices in our biweekly newsletter just for devs.

By submitting, I agree to let GitHub and its affiliates use my information for personalized communications, targeted advertising, and campaign effectiveness. See the GitHub Privacy Statement for more details.

Bot-created pull requests can run workflows if approved - GitHub Changelog