diff --git a/imports.tf b/imports.tf
index f398a88..e6c40df 100644
--- a/imports.tf
+++ b/imports.tf
@@ -20,3 +20,14 @@ import {
   to = github_repository_file.dependabot_notify["tfroot-twilio"]
   id = "tfroot-twilio:.github/workflows/dependabot-notify.yml:"
 }
+
+# The kustomize-cluster dependabot-notify workflow was seeded through the
+# pull-request path before this resource instance existed in state; the
+# direct write in apply run 189 was rejected by the destination's required
+# pull-request protection. The live file content matches the managed
+# template exactly, so import it before central management, mirroring the
+# tfroot-twilio adoption above.
+import {
+  to = github_repository_file.dependabot_notify["kustomize-cluster"]
+  id = "kustomize-cluster:.github/workflows/dependabot-notify.yml:"
+}