BUILD-10590 retrigger verified approvals on review events

[julien-carsique-sonarsource]

Summary

Part of BUILD-10590 — PoC GitHub org rule workflow to secure PRs.

Adds a workflow that re-triggers the verified-approvals check whenever a pull request review is submitted or dismissed.
This ensures the approval count is re-evaluated after any review activity, keeping the GitHub ruleset check accurate.

Depends on SonarSource/ci-github-actions#227
Need to be merged first, for testing purposes. Then it will be realigned on master: #88

Changes

• Add .github/workflows/re-trigger-approvals.yml: triggers on pull_request_review (submitted/dismissed) and delegates to the reusable workflow SonarSource/ci-github-actions/.github/workflows/re-trigger-approvals.yml.

Context

The GitHub org ruleset #4485920 ("2 approvers for public repositories") requires the verified-approvals workflow to pass before merging.
This workflow enforces that:

• internal PRs have at least 1 approval
• external PRs have at least 2 approvals

This repository (sonar-dummy-python-oss) is used as the test bed for the feature.

Test plan

• Open a PR and verify the verified-approvals check is triggered on review submission
• Dismiss a review and verify the check is re-triggered
• Confirm check passes with the required number of approvals for internal and external PRs

[hashicorp-vault-sonar-prod]

BUILD-10590

[Copilot]

Pull request overview

This PR adds a new GitHub Actions workflow (.github/workflows/re-trigger-approvals.yml) that re-triggers the verified-approvals check whenever a pull request review is submitted or dismissed. This is part of the BUILD-10590 initiative to secure PRs via a GitHub org ruleset that requires the verified-approvals check to pass before merging. The workflow delegates to a reusable workflow in SonarSource/ci-github-actions.

Changes:

• Add .github/workflows/re-trigger-approvals.yml that triggers on pull_request_review (submitted/dismissed) and workflow_dispatch, and calls the reusable re-trigger-approvals workflow from ci-github-actions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[sonarqubecloud]

SonarQube reviewer guide

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 Dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud