From 1e6addd1a1c61da5dbd6958c9a90c052dd804b2f Mon Sep 17 00:00:00 2001
From: Jonathan Moss <2729151+jwmoss@users.noreply.github.com>
Date: Wed, 16 Sep 2026 16:05:31 -0400
Subject: [PATCH] ci: allow manual verification before releases

---
 .github/workflows/ci.yml | 1 +
 CHANGELOG.md             | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e819986..4be6756 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -5,6 +5,7 @@ on:
     branches:
       - main
   pull_request:
+  workflow_dispatch:
 
 permissions:
   contents: read
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8cd81b3..22d7379 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ This project uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ### Changed
 
+- CI supports manual runs to verify a release commit when a push event does not start a run.
 - Default scaffold pins use module version 1.0.1, with input validation and permission checks
   in each resource module and unknown grant-target checks in the workspace pattern.