From ec4293091d6286e4bea009fdb78cec34e15c6631 Mon Sep 17 00:00:00 2001
From: Aaron <29749331+aarnphm@users.noreply.github.com>
Date: Wed, 5 Jul 2023 10:51:46 -0400
Subject: [PATCH] ci: wait for auto-bot to run check

only run evergreen on PR

Signed-off-by: Aaron <29749331+aarnphm@users.noreply.github.com>
---
 .github/workflows/auto-bot.yml        | 7 +++++++
 .github/workflows/ci.yml              | 3 ++-
 .github/workflows/create-releases.yml | 2 ++
 3 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/auto-bot.yml b/.github/workflows/auto-bot.yml
index 1d39660d..6c2d6fa9 100644
--- a/.github/workflows/auto-bot.yml
+++ b/.github/workflows/auto-bot.yml
@@ -26,6 +26,13 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
+      - name: Wait for tests to succeed
+        uses: lewagon/wait-on-check-action@v1.3.1
+        with:
+          ref: ${{ github.ref }}
+          check-name: check
+          wait-interval: 10
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Enable auto-merge for Dependabot PRs
         run: gh pr merge --auto --squash ${{ github.event.pull_request.html_url }}
         env:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2d552810..ed754605 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -60,6 +60,7 @@ jobs:
     runs-on: ubuntu-latest
     needs:
       - tests
+    if: github.event_name == 'pull_request'
     steps:
       - uses: actions/checkout@v3
         with:
@@ -94,7 +95,7 @@ jobs:
         with:
           path: coverage-report.md
   evergreen: # https://github.com/marketplace/actions/alls-green#why
-    if: always()
+    if: github.event_name == 'pull_request'
     needs:
       - coverage
       - tests
diff --git a/.github/workflows/create-releases.yml b/.github/workflows/create-releases.yml
index e898bcfb..97ac92b9 100644
--- a/.github/workflows/create-releases.yml
+++ b/.github/workflows/create-releases.yml
@@ -39,8 +39,10 @@ jobs:
   release:
     if: github.repository_owner == 'bentoml'
     runs-on: ubuntu-latest
+    environment: release
     permissions:
       contents: write
+      id-token: write
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps: