# Bot-created pull requests can run workflows if approved

> Source: <https://github.blog/changelog/2026-06-11-bot-created-pull-requests-can-run-workflows-if-approved>
> Published: 2026-06-11 19:00:56+00:00

# Bot-created pull requests can run workflows if approved

Pull requests created by the `github-actions[bot]`

are now able to run your CI/CD workflows with user approval. Requiring approval is a security measure to ensure generated code does not automatically run workflows which may have access to sensitive information. This matches the behavior of [Copilot-generated pull requests](https://docs.github.com/copilot/how-tos/use-copilot-agents/cloud-agent/configuring-agent-settings#allowing-github-actions-workflows-to-run-automatically-when-copilot-pushes).

Previously, pull requests generated by `github-actions[bot]`

were not able to run CI/CD workflows, allowing pull requests to be accidentally merged without having gone through CI. This change allows all pull requests, even bot-generated changes, to run configured CI/CD workflows if approved by a user with write access to the repository.
