Skip to content
Latchkey

GitHub Actions "workflows awaiting approval for first-time contributor"

For pull requests from first-time contributors (and fork PRs under certain settings), GitHub holds workflow runs until a maintainer approves, to prevent untrusted code from running automatically.

What this error means

A PR from a new or external contributor shows checks pending with a message that workflows require approval.

github-actions
This workflow requires approval from a maintainer.
First-time contributors need a maintainer to approve running workflows on this pull request.

Common causes

First-time contributor protection

Repo Actions settings require approval for runs from contributors who have not had a merged PR.

Fork PR approval policy

The setting for fork pull requests is configured to require approval for all outside collaborators.

How to fix it

Approve the run as a maintainer

  1. Open the PR checks; click Approve and run workflows.
  2. After the first approved+merged contribution, future PRs from that author may run automatically depending on settings.

Adjust the fork-PR approval policy

  1. Open Settings > Actions > General > Fork pull request workflows.
  2. Choose the approval level appropriate for your trust model.

How to prevent it

  • Document the approval step for maintainers triaging external PRs.
  • Keep the approval requirement for untrusted forks - it is a security control.

Related guides

Tired of flaky CI? Latchkey auto-heals failed jobs and retries them for you. Start free →