feat: trigger CI after auto-format workflow completes

Add workflow_run trigger to CI so it runs after the Auto Format workflow
completes. This ensures CI validates code after auto-formatting commits
changes, preventing PRs from being in a limbo state.

Author: d0ugal

.github/workflows/ci.yml

@@ -4,6 +4,10 @@ on:
   push:
     branches: [ main, 'release-please--branches--main' ]
   pull_request:
+  workflow_run:
+    workflows: ["Auto Format"]
+    types:
+      - completed
 
 env:
   REGISTRY: ghcr.io
@@ -13,12 +17,15 @@ jobs:
   test:
     name: Test
     runs-on: ubuntu-latest
+    if: ${{ github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success' }}
 
     steps:
     - name: Checkout code
       uses: actions/checkout@v5
       with:
         fetch-depth: 0
+        ref: ${{ github.event.workflow_run.head_branch || github.ref }}
+        sha: ${{ github.event.workflow_run.head_sha || github.sha }}
 
     - name: Set up Go 1.25
       uses: actions/setup-go@v6
@@ -41,12 +48,15 @@ jobs:
   lint:
     name: Lint
     runs-on: ubuntu-latest
+    if: ${{ github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success' }}
 
     steps:
     - name: Checkout code
       uses: actions/checkout@v5
       with:
         fetch-depth: 0
+        ref: ${{ github.event.workflow_run.head_branch || github.ref }}
+        sha: ${{ github.event.workflow_run.head_sha || github.sha }}
 
     - name: Run linting using Makefile
       run: make lint-only
@@ -55,12 +65,15 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     needs: [test]
+    if: ${{ github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success' }}
 
     steps:
     - name: Checkout code
       uses: actions/checkout@v5
       with:
         fetch-depth: 0
+        ref: ${{ github.event.workflow_run.head_branch || github.ref }}
+        sha: ${{ github.event.workflow_run.head_sha || github.sha }}
 
     - name: Set up Go
       uses: actions/setup-go@v6
@@ -81,6 +94,7 @@ jobs:
   security:
     name: Security Scan
     runs-on: ubuntu-latest
+    if: ${{ github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success' }}
     permissions:
       contents: read
       security-events: write
@@ -90,6 +104,8 @@ jobs:
       uses: actions/checkout@v5
       with:
         fetch-depth: 0
+        ref: ${{ github.event.workflow_run.head_branch || github.ref }}
+        sha: ${{ github.event.workflow_run.head_sha || github.sha }}
 
     - name: Run Trivy vulnerability scanner
       uses: aquasecurity/trivy-action@master
@@ -104,7 +120,7 @@ jobs:
     name: Development Build
     runs-on: ubuntu-latest
     needs: [test]
-    if: github.event_name == 'push'
+    if: github.event_name == 'push' || (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success')
     permissions:
       contents: read
       packages: write
@@ -114,6 +130,8 @@ jobs:
       uses: actions/checkout@v5
       with:
         fetch-depth: 0
+        ref: ${{ github.event.workflow_run.head_branch || github.ref }}
+        sha: ${{ github.event.workflow_run.head_sha || github.sha }}
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3