From f231f8ac117525535e122d58f15c7057a3c4ff27 Mon Sep 17 00:00:00 2001
From: bo0tzz <git@bo0tzz.me>
Date: Wed, 29 Jul 2026 19:26:06 +0200
Subject: [PATCH] feat: replace custom Approval Check with required_reviewers

---
 tf/deployment/modules/shared/github/org/rulesets.tf | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/tf/deployment/modules/shared/github/org/rulesets.tf b/tf/deployment/modules/shared/github/org/rulesets.tf
index d47b976e..f09ab757 100644
--- a/tf/deployment/modules/shared/github/org/rulesets.tf
+++ b/tf/deployment/modules/shared/github/org/rulesets.tf
@@ -69,8 +69,16 @@ resource "github_organization_ruleset" "org_required_checks" {
       required_check {
         context = "Zizmor / zizmor"
       }
-      required_check {
-        context = "Approval Check"
+    }
+
+    pull_request {
+      required_reviewers {
+        reviewer {
+          id   = github_team.employees.id
+          type = "Team"
+        }
+        file_patterns     = ["**"]
+        minimum_approvals = 1
       }
     }
   }