On my GitHub repository I have 2 workflows running after pull requests:
- Test workflow
- CLA assistant workflow
On my test workflow, I have Secrets that I wouldn't like to expose to other people. Therefore, for security reasons, I'd like to manually review a pull request before running the tests.
GitHub allows me to configure the required approval for workflows from public forks. This configuration is per repository and I'd like to configure it per workflow. In other words - the requirement is that the CLA assistant will run on each pull request, but the tests will run only after a maintainer click on the Approve and run button.
Does somebody have an idea how to make the CLA assistant running for each PR, but the tests only after clicking on the Approve button?