Chris Farhood
d9aaf5a146
Follows canonical pattern from headlamp-sealed-secrets-plugin. The pull_request trigger now fires on [uat, main] so the promotion gate check auto-runs on PR open/sync for dev→uat PRs, not just on review events.
20 lines
547 B
YAML
20 lines
547 B
YAML
name: Promotion Gate
|
|
|
|
# Calls the shared promotion gate workflow.
|
|
# dev PRs: no gate (engineer self-merges).
|
|
# uat PRs: QA approval required.
|
|
# main PRs: UAT approval required (uat→main promotions).
|
|
|
|
on:
|
|
pull_request_review:
|
|
types: [submitted, dismissed]
|
|
pull_request:
|
|
branches: [uat, main]
|
|
types: [opened, reopened, synchronize]
|
|
|
|
jobs:
|
|
promotion-gate:
|
|
uses: privilegedescalation/.github/.github/workflows/dual-approval-check.yaml@main
|
|
secrets: inherit
|
|
with:
|
|
pr_number: ${{ github.event.pull_request.number }} |