GitHub Actions "workflows awaiting approval for first-time contributor"

By Daniel Zoghalchali·Latchkey

For pull requests from first-time contributors (and fork PRs under certain settings), GitHub holds workflow runs until a maintainer approves, to prevent untrusted code from running automatically.

What this error means

A PR from a new or external contributor shows checks pending with a message that workflows require approval.

This workflow requires approval from a maintainer.
First-time contributors need a maintainer to approve running workflows on this pull request.

Common causes

First-time contributor protection

Repo Actions settings require approval for runs from contributors who have not had a merged PR.

Fork PR approval policy

The setting for fork pull requests is configured to require approval for all outside collaborators.

How to fix it

Approve the run as a maintainer

1. Open the PR checks; click Approve and run workflows.
2. After the first approved+merged contribution, future PRs from that author may run automatically depending on settings.

Adjust the fork-PR approval policy

1. Open Settings > Actions > General > Fork pull request workflows.
2. Choose the approval level appropriate for your trust model.

How to prevent it

• Document the approval step for maintainers triaging external PRs.
• Keep the approval requirement for untrusted forks - it is a security control.

Frequently asked questions

Related guides

References

• GitHub Actions documentation
• Workflow syntax for GitHub Actions