Fix promotion gate: add uat branch trigger, rename to Promotion Gate

Follows canonical pattern from headlamp-sealed-secrets-plugin.
The pull_request trigger now fires on [uat, main] so the promotion
gate check auto-runs on PR open/sync for dev→uat PRs, not just
on review events.
This commit is contained in:
2026-05-14 04:09:48 +00:00
committed by Gandalf the Greybeard [agent]
parent 4b26b97caf
commit d9aaf5a146
+8 -8
View File
@@ -1,20 +1,20 @@
name: Dual Approval (CTO + QA) name: Promotion Gate
# Calls the shared dual-approval-check workflow. # Calls the shared promotion gate workflow.
# Passes when both privilegedescalation-cto and privilegedescalation-qa # dev PRs: no gate (engineer self-merges).
# have approved the PR. Add "Dual Approval (CTO + QA)" to required_status_checks # uat PRs: QA approval required.
# in branch protection to enforce this gate. # main PRs: UAT approval required (uat→main promotions).
on: on:
pull_request_review: pull_request_review:
types: [submitted, dismissed] types: [submitted, dismissed]
pull_request: pull_request:
branches: [main] branches: [uat, main]
types: [opened, reopened, synchronize] types: [opened, reopened, synchronize]
jobs: jobs:
dual-approval: promotion-gate:
uses: privilegedescalation/.github/.github/workflows/dual-approval-check.yaml@main uses: privilegedescalation/.github/.github/workflows/dual-approval-check.yaml@main
secrets: inherit secrets: inherit
with: with:
pr_number: ${{ github.event.pull_request.number }} pr_number: ${{ github.event.pull_request.number }}