From a26e1878ed26499216d288a8ca2841a872d109db Mon Sep 17 00:00:00 2001
From: Alex-Welsh <alex@stackhpc.com>
Date: Tue, 26 Aug 2025 16:15:27 +0100
Subject: [PATCH] Require core approval on check-review pipeline

---
 zuul.d/pipelines.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/zuul.d/pipelines.yaml b/zuul.d/pipelines.yaml
index 0bbb774..c42ca88 100644
--- a/zuul.d/pipelines.yaml
+++ b/zuul.d/pipelines.yaml
@@ -60,6 +60,12 @@
       initial review to allow for secrets usage.
     manager: independent
     post-review: true
+    require:
+      github:
+        review:
+          # Require an approval from user with write access (e.g. core-reviewer)
+          - permission: write
+            type: approved
     trigger:
       github:
         # Run this pipeline on new/changed pull requests