comments addressed

Author: Raj-StepSecurity

.github/workflows/auto_cherry_pick.yml

@@ -7,6 +7,13 @@ on:
         description: "Base branch to create the PR against"
         required: true
         default: "main"
+      mode:
+        description: "Run mode: cherry-pick or verify"
+        required: false
+        default: "cherry-pick"
+
+  pull_request:
+    types: [opened, synchronize, labeled]
 
 permissions:
   contents: write
@@ -16,8 +23,10 @@ permissions:
 
 jobs:
   cherry-pick:
+    if: github.event_name == 'workflow_dispatch' || contains(fromJson(toJson(github.event.pull_request.labels)).*.name, 'review-required')
     uses: step-security/reusable-workflows/.github/workflows/auto_cherry_pick.yaml@v1
     with:
       original-owner: "PaloAltoNetworks"
       repo-name: "prisma-cloud-scan"
       base_branch: ${{ inputs.base_branch }}
+      mode: ${{ github.event_name == 'pull_request' && 'verify' || inputs.mode }}

LICENSE

@@ -187,7 +187,7 @@
       identification within third-party archives.
 
    Copyright 2021 Palo Alto Networks
-   Copyright (c) 2025 StepSecurity
+   Copyright 2025 StepSecurity
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.