From eb2c0f86a8d2442c6d32f45da6f8a4f86269317e Mon Sep 17 00:00:00 2001
From: Ariadne Conill <ariadne@ariadne.space>
Date: Fri, 23 Oct 2026 10:37:23 -0700
Subject: [PATCH] automation: trigger the edera/6.18-lts audit weekly

edera/6.18-lts audits itself for Edera commits from edera/mainline that
it lacks (kernel-nightly.yml with audit=true), but scheduled workflows
run only from the default branch. Add a workflow here whose only job is
to dispatch that audit every Monday.
---
 .github/workflows/lts-audit-trigger.yml | 33 +++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 .github/workflows/lts-audit-trigger.yml

diff --git a/.github/workflows/lts-audit-trigger.yml b/.github/workflows/lts-audit-trigger.yml
new file mode 100644
index 00000000000000..7b141f8b8c3529
--- /dev/null
+++ b/.github/workflows/lts-audit-trigger.yml
@@ -0,0 +1,33 @@
+name: Trigger edera/6.18-lts audit
+
+# Starts edera/6.18-lts's weekly audit for Edera commits from edera/mainline
+# that it lacks, and does nothing else. The audit runs there, with its own
+# copy of kernel-nightly.yml (audit=true runs lts-audit.yml), and keeps an
+# issue open while anything is missing.
+#
+# GitHub runs scheduled workflows only from the default branch, edera/mainline,
+# so this schedule lives here, like lts-rebase-trigger.yml. It runs after
+# that night's rebases have had time to land.
+
+on:
+  schedule:
+    - cron: '41 9 * * 1' # 09:41 UTC Mondays
+
+permissions: {}
+
+jobs:
+  dispatch:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      actions: write
+    steps:
+      - name: Harden runner
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
+        with:
+          egress-policy: audit
+
+      - name: Dispatch
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh workflow run kernel-nightly.yml --repo "$GITHUB_REPOSITORY" --ref edera/6.18-lts -f audit=true