From 28aefc58de6c6daa29d381ca20ecc67f61d1f68f Mon Sep 17 00:00:00 2001
From: anakinxc <103552181+anakinxc@users.noreply.github.com>
Date: Wed, 3 Jan 2024 20:34:42 +0800
Subject: [PATCH] Update circleci.yml

---
 .github/workflows/circleci.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/circleci.yml b/.github/workflows/circleci.yml
index 0c686aad..7ece9022 100644
--- a/.github/workflows/circleci.yml
+++ b/.github/workflows/circleci.yml
@@ -8,8 +8,14 @@ on:
     branches:
     - main
 jobs:
+  approve: # First step
+    runs-on: ubuntu-latest
+    steps:
+    - name: Approve
+      run: echo For security reasons, all pull requests need to be approved first before running any automated CI.
   trigger-circleci:
     runs-on: ubuntu-latest
+    needs: [approve] # Require the first step to finish
     steps:
       - name: secretflow-yacl-ci
         id: secretflow-yacl-ci