From 0c395a63015192340cd1da00217db76c842590ad Mon Sep 17 00:00:00 2001
From: Sam Hatfield <samuel.hatfield@ecmwf.int>
Date: Thu, 23 Jan 2025 15:58:39 +0000
Subject: [PATCH] Add approved manual triggering of build-hpc action

---
 .github/workflows/build-hpc.yml       |  5 +++++
 .github/workflows/label-public-pr.yml | 10 ++++++++++
 2 files changed, 15 insertions(+)
 create mode 100644 .github/workflows/label-public-pr.yml

diff --git a/.github/workflows/build-hpc.yml b/.github/workflows/build-hpc.yml
index 07f31d12d..b72ef4b22 100644
--- a/.github/workflows/build-hpc.yml
+++ b/.github/workflows/build-hpc.yml
@@ -17,6 +17,10 @@ on:
   # Allow workflow to be dispatched on demand
   workflow_dispatch: ~
 
+  # Trigger after public PR approved for CI
+  pull_request_target:
+    types: [labeled]
+
 env:
   ECTRANS_TOOLS: ${{ github.workspace }}/.github/tools
   CTEST_PARALLEL_LEVEL: 1
@@ -25,6 +29,7 @@ env:
 jobs:
   ci-hpc:
     name: ci-hpc
+    if: ${{ !github.event.pull_request.head.repo.fork && github.event.action != 'labeled' || github.event.label.name == 'approved-for-ci' }}
 
     strategy:
       fail-fast: false    # false: try to complete all jobs
diff --git a/.github/workflows/label-public-pr.yml b/.github/workflows/label-public-pr.yml
new file mode 100644
index 000000000..eda990063
--- /dev/null
+++ b/.github/workflows/label-public-pr.yml
@@ -0,0 +1,10 @@
+# Manage labels of pull requests that originate from forks
+name: label-public-pr
+ 
+on:
+  pull_request_target:
+    types: [opened, synchronize]
+ 
+jobs:
+  label:
+    uses: ecmwf-actions/reusable-workflows/.github/workflows/label-pr.yml@v2
\ No newline at end of file