GitHub Actions "workflows awaiting approval for first-time contributor"
For pull requests from first-time contributors (and fork PRs under certain settings), GitHub holds workflow runs until a maintainer approves, to prevent untrusted code from running automatically.
What this error means
A PR from a new or external contributor shows checks pending with a message that workflows require approval.
github-actions
This workflow requires approval from a maintainer.
First-time contributors need a maintainer to approve running workflows on this pull request.Common causes
First-time contributor protection
Repo Actions settings require approval for runs from contributors who have not had a merged PR.
Fork PR approval policy
The setting for fork pull requests is configured to require approval for all outside collaborators.
How to fix it
Approve the run as a maintainer
- Open the PR checks; click Approve and run workflows.
- After the first approved+merged contribution, future PRs from that author may run automatically depending on settings.
Adjust the fork-PR approval policy
- Open Settings > Actions > General > Fork pull request workflows.
- Choose the approval level appropriate for your trust model.
How to prevent it
- Document the approval step for maintainers triaging external PRs.
- Keep the approval requirement for untrusted forks - it is a security control.
Related guides
GitHub Actions "Waiting for approval to run workflows for this PR"Resolve a PR stuck at "Waiting for approval to run workflows" by having a maintainer approve the queued run.
GitHub Actions "not allowed because it requires approval" (First-Time Contributor)Fix GitHub Actions runs stuck "requires approval" on first-time-contributor pull requests - a maintainer must…
GitHub Actions "This workflow is awaiting approval from required reviewers"Resolve a deployment job that is waiting on an environment protection rule requiring reviewer approval.