Explicit workflow approval is being required for innocent PRs

[saki7]

AFAIK, this GitHub warning is intended for protecting repositories from attackers executing arbitrary code on CI. Normal PRs should be able to run tests without approval. If my understanding is correct, this behavior is likely occurring due to CI misconfiguration.

(Noticed on #30.)

Expected behavior:

Such approval should be only required on PRs that explicitly touch GHA configuration (ci.yml).

Current behavior:

Seemingly innocent PR such as #30 leads to warning message demanding explicit approval from maintainers to run the workflows.

Solution

As per the documentation suggests, someone with access to the "Approval for running fork pull request workflows from contributors" setting need to take a look into this. (I don't have the privilege right now)

[saki7]

Regarding #30, I'm going to press that "Approve workflows to run" button for now.