Google recommend to enable Comment control when creating a pull request trigger.
There is an option to enable this for every one except for owners and collaborators.
However, since there is no way to add an app as a collaborator in github, dependabot pull requests are blocked and need to be manually triggered by commenting "/gcbrun" in each one of them.
Is there a workaround to get dependabot PR run automatically ?