From 591d68a5f878a94336a98633c189432cf875f590 Mon Sep 17 00:00:00 2001
From: Aleksey Safonov <55020240+safal207@users.noreply.github.com>
Date: Mon, 20 Jul 2026 21:51:23 +0300
Subject: [PATCH] ci: bind Cursor audit to isolated child PR

---
 .github/workflows/cursor-public-audit.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/cursor-public-audit.yml b/.github/workflows/cursor-public-audit.yml
index b1846d68..fa00272c 100644
--- a/.github/workflows/cursor-public-audit.yml
+++ b/.github/workflows/cursor-public-audit.yml
@@ -2,6 +2,15 @@ name: Cursor Public Audit
 
 on:
   workflow_dispatch:
+  pull_request:
+    branches:
+      - agent/ai-coding-companies-public-audit-v0-1
+    paths:
+      - .github/workflows/cursor-public-audit.yml
+      - .github/workflows/company-public-audit.yml
+      - audits/companies/cursor/public-audit.json
+      - scripts/company_public_audit_engine.py
+      - scripts/company_public_browser_probe.mjs
 
 permissions:
   contents: read
@@ -16,6 +25,6 @@ jobs:
     uses: ./.github/workflows/company-public-audit.yml
     with:
       config_path: audits/companies/cursor/public-audit.json
-      engine_ref: ${{ github.sha }}
+      engine_ref: ${{ github.event.pull_request.head.sha || github.sha }}
       retention_days: 30
       fail_on: never