From d25bd3f9614346b1d6edf75cfb158d5286a9e3f1 Mon Sep 17 00:00:00 2001
From: Karthik BekalPattathana
 <133984042+karthikbekalp@users.noreply.github.com>
Date: Wed, 7 Oct 2026 11:18:26 -0700
Subject: [PATCH] ci: check shared installer coordination on PRs

Signed-off-by: Karthik BekalPattathana <133984042+karthikbekalp@users.noreply.github.com>
---
 .github/workflows/installer_coordination.yml | 29 ++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100644 .github/workflows/installer_coordination.yml

diff --git a/.github/workflows/installer_coordination.yml b/.github/workflows/installer_coordination.yml
new file mode 100644
index 00000000..f1e7bb25
--- /dev/null
+++ b/.github/workflows/installer_coordination.yml
@@ -0,0 +1,29 @@
+# Both triggers use trusted base-branch code; PR code is never checked out or executed.
+name: Installer Coordination
+
+on:
+  pull_request_target: # zizmor: ignore[dangerous-triggers] -- trusted central tooling only; no PR checkout or execution
+    branches: [mainline]
+    types: [opened, synchronize, reopened, edited, ready_for_review]
+  issue_comment:
+    types: [created, edited, deleted]
+
+permissions: {}
+
+concurrency:
+  group: installer-coordination-${{ github.event.pull_request.number || github.event.issue.number }}
+  cancel-in-progress: true
+
+jobs:
+  coordination:
+    if: >-
+      github.event_name == 'pull_request_target' ||
+      (github.event.issue.pull_request && github.event.comment.user.type != 'Bot')
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: write
+      statuses: write
+    uses: aws-deadline/.github/.github/workflows/reusable_installer_coordination.yml@mainline
+    with:
+      pr_number: ${{ format('{0}', github.event.pull_request.number || github.event.issue.number) }}