ci: wait for auto-bot to run check

only run evergreen on PR

Signed-off-by: Aaron <29749331+aarnphm@users.noreply.github.com>

.github/workflows/auto-bot.yml

@@ -26,6 +26,13 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
+      - name: Wait for tests to succeed
+        uses: lewagon/wait-on-check-action@v1.3.1
+        with:
+          ref: ${{ github.ref }}
+          check-name: check
+          wait-interval: 10
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Enable auto-merge for Dependabot PRs
         run: gh pr merge --auto --squash ${{ github.event.pull_request.html_url }}
         env:

.github/workflows/ci.yml

@@ -60,6 +60,7 @@ jobs:
     runs-on: ubuntu-latest
     needs:
       - tests
+    if: github.event_name == 'pull_request'
     steps:
       - uses: actions/checkout@v3
         with:
@@ -94,7 +95,7 @@ jobs:
         with:
           path: coverage-report.md
   evergreen: # https://github.com/marketplace/actions/alls-green#why
-    if: always()
+    if: github.event_name == 'pull_request'
     needs:
       - coverage
       - tests

.github/workflows/create-releases.yml

@@ -39,8 +39,10 @@ jobs:
   release:
     if: github.repository_owner == 'bentoml'
     runs-on: ubuntu-latest
+    environment: release
     permissions:
       contents: write
+      id-token: write
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps: