Skip to content

ci: only run CodeQL on PRs that modify GitHub workflows#4302

Closed
andygrove wants to merge 2 commits into
apache:mainfrom
andygrove:skip-codeql-docs
Closed

ci: only run CodeQL on PRs that modify GitHub workflows#4302
andygrove wants to merge 2 commits into
apache:mainfrom
andygrove:skip-codeql-docs

Conversation

@andygrove
Copy link
Copy Markdown
Member

@andygrove andygrove commented May 12, 2026

Summary

  • The CodeQL workflow is configured to scan GitHub Actions only (languages: actions), so it only needs to run when workflow files are actually changed
  • Replace paths-ignore with a paths allow-list targeting .github/** so CodeQL only triggers on PRs that modify workflow files

Test plan

  • Verify CodeQL runs on PRs that touch .github/ files
  • Verify CodeQL is skipped for PRs that don't touch .github/ files

🤖 Generated with Claude Code

andygrove added 2 commits May 12, 2026 10:41
The CodeQL workflow scans GitHub Actions files and is not relevant
when only documentation files are changed. Add paths-ignore to the
pull_request trigger, matching the pattern used by other CI workflows.
CodeQL is configured to scan GitHub Actions only, so it only needs
to run when workflow files are actually changed.
@andygrove andygrove changed the title ci: skip CodeQL checks for docs-only PRs ci: only run CodeQL on PRs that modify GitHub workflows May 12, 2026
@andygrove
Copy link
Copy Markdown
Member Author

Superseded by #4303 which combines all CI path filter improvements into a single PR.

@andygrove andygrove closed this May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant