Comment by dv_dt

You probably want to turn on manual approval for running ci on external prs