diff --git a/.github/workflows/ci-saas.yml b/.github/workflows/ci-saas.yml
index 8961f7e752..d71bdf5630 100644
--- a/.github/workflows/ci-saas.yml
+++ b/.github/workflows/ci-saas.yml
@@ -2,6 +2,7 @@ name: CI (SaaS)
 
 on:
   push:
+  workflow_dispatch:
 
 permissions:
   contents: read
diff --git a/.github/workflows/dependabot-sync-saas-lockfile.yml b/.github/workflows/dependabot-sync-saas-lockfile.yml
index 4abc2d454d..1cc7971c19 100644
--- a/.github/workflows/dependabot-sync-saas-lockfile.yml
+++ b/.github/workflows/dependabot-sync-saas-lockfile.yml
@@ -9,6 +9,7 @@ on:
 
 permissions:
   contents: write
+  actions: write
 
 jobs:
   sync:
@@ -24,7 +25,10 @@ jobs:
       - name: Forward Gemfile.lock changes to Gemfile.saas.lock
         run: bin/bundle-drift forward
 
-      - name: Commit updated lockfile
+      # Pushes made with GITHUB_TOKEN don't trigger push workflows, so start CI on the new commit explicitly.
+      - name: Commit updated lockfile and run CI
+        env:
+          GH_TOKEN: ${{ github.token }}
         run: |
           git add Gemfile.saas.lock
           if ! git diff --cached --quiet; then
@@ -32,4 +36,5 @@ jobs:
             git config user.email "github-actions[bot]@users.noreply.github.com"
             git commit -m "Sync Gemfile.saas.lock"
             git push
+            gh workflow run ci-saas.yml --ref "$GITHUB_REF_NAME"
           fi