From ceadb9ddc49937b9a7b23eb3d526a80f5b45e5fe Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Thu, 23 Apr 2026 08:30:42 +0100
Subject: [PATCH] ci: document docs agent workflow-run guard

---
 .github/workflows/docs-agent.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docs-agent.yml b/.github/workflows/docs-agent.yml
index 0365f90aac8..7d530364f48 100644
--- a/.github/workflows/docs-agent.yml
+++ b/.github/workflows/docs-agent.yml
@@ -1,7 +1,7 @@
 name: Docs Agent
 
 on:
-  workflow_run:
+  workflow_run: # zizmor: ignore[dangerous-triggers] main-only docs repair after trusted CI; job gates repository, event, branch, actor, conclusion, and exact current main SHA before using write token
     workflows:
       - CI
     types: