diff --git a/.circleci/config.yml b/.circleci/config.yml
index 1c3f954c..1cfbca05 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -313,6 +313,10 @@ workflows:
         - equal: [ main , << pipeline.git.branch >> ]
         - equal: [ true , << pipeline.parameters.run_downstream_tests >> ]
     jobs:
+      - hold:
+          type: approval
       - trigger-downstream-ci:
           context: openquantumsafe
+          requires:
+            - hold