buildomat: allow dependabot/renovate jobs without manual approval (#371)

oxidecomputer · Jun 13, 2022 · 32f056c · 32f056c
1 parent 25b85d7
commit 32f056c
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/.github/buildomat/config.toml b/.github/buildomat/config.toml
@@ -3,3 +3,18 @@
 # the buildomat integration to create check suites.
 #
 enable = true
+
+#
+# Require approval for pull requests made by users outside our organisation.
+#
+org_only = true
+
+#
+# We accept pull requests from several automated services that are outside the
+# organisation.  Allow jobs from those sources to proceed without manual
+# approval:
+#
+allow_users = [
+	"dependabot[bot]",
+	"renovate[bot]",
+]