elastic / cloudbeat / 24169485557
76%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 235
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 75.807% (-0.007%) from 75.814%
24169485557

push

github

web-flow 
feat: add GitHub Actions workflow to auto-approve Renovate PRs (#4314)

## Summary

Adds a GitHub Actions workflow to automatically approve Renovate PRs
that have the `renovate-auto-approve` label and have GitHub native
auto-merge enabled.

### How it works
1. Renovate creates a PR with `automerge: true` + `automergeType: "pr"`
— this enables GitHub native auto-merge on the PR, triggering the
`auto_merge_enabled` event
2. This workflow fires, checks the PR is from
`elastic-renovate-prod[bot]` with the `renovate-auto-approve` label
3. The workflow approves the PR (satisfying the required review gate)
4. GitHub's auto-merge waits for CI to pass, then automatically
squash-merges the PR

### Why this approach
Mirrors
[elastic/ecp-synthetics-monitors](https://github.com/elastic/ecp-synthetics-monitors/blob/main/.github/workflows/auto-approve-renovate-prs.yaml)
— uses GitHub's native auto-merge + a lightweight Actions workflow.

### Changes from existing workflow
- Branch patterns use globs (`9.*`, `8.*`) instead of hardcoded versions
— no more manual updates needed when new minor versions are created
- Added `synchronize` event trigger so the workflow re-approves if
Renovate pushes a new commit to the PR
- Pinned `actions/github-script` to a digest SHA (`v8`) for supply-chain
security

### Scope
Covers all cloudbeat base branches: `main`, `9.*`, `8.*`

🤖 Generated with Claude Code

9726 of 12830 relevant lines covered (75.81%)

16.4 hits per line

Coverage Regressions

Lines Coverage ∆ File
3
82.74
 -0.33% internal/resources/providers/gcplib/inventory/provider.go
Jobs
ID Job ID Ran Files Coverage
1 24169485557.1 235
75.81
 GitHub Action Run
Source Files on build 24169485557