From 65d1943c0dccf6b8307931def83deef239ab106c Mon Sep 17 00:00:00 2001
From: Andy Grove <agrove@apache.org>
Date: Tue, 12 May 2026 10:52:04 -0600
Subject: [PATCH] ci: use targeted path filters for codeql, miri, and
 missing-suites checks

- codeql.yml: add paths allow-list for .github/** on PRs since CodeQL
  only scans GitHub Actions files
- miri.yml: replace paths-ignore with paths allow-list for native/**
  since Miri only checks Rust code in the native directory
- pr_missing_suites.yml: add paths allow-list for test suite files,
  PR build workflows, and the check script since it only validates
  that *Suite.scala files are listed in CI workflows
---
 .github/workflows/codeql.yml            |  2 ++
 .github/workflows/miri.yml              | 22 ++++------------------
 .github/workflows/pr_missing_suites.yml | 12 ++++++++++++
 3 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 24d1078d2b..36c049e615 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -27,6 +27,8 @@ on:
     branches: [ "main" ]
   pull_request:
     branches: [ "main" ]
+    paths:
+      - ".github/**"
   schedule:
     - cron: '16 4 * * 1'
 
diff --git a/.github/workflows/miri.yml b/.github/workflows/miri.yml
index e31861c786..4241539a34 100644
--- a/.github/workflows/miri.yml
+++ b/.github/workflows/miri.yml
@@ -25,25 +25,11 @@ on:
   push:
     branches:
       - main
-    paths-ignore:
-      - "doc/**"
-      - "docs/**"
-      - "**.md"
-      - "dev/changelog/*.md"
-      - "native/core/benches/**"
-      - "native/spark-expr/benches/**"
-      - "spark/src/test/scala/org/apache/spark/sql/benchmark/**"
-      - "spark/src/main/scala/org/apache/comet/GenerateDocs.scala"
+    paths:
+      - "native/**"
   pull_request:
-    paths-ignore:
-      - "doc/**"
-      - "docs/**"
-      - "**.md"
-      - "dev/changelog/*.md"
-      - "native/core/benches/**"
-      - "native/spark-expr/benches/**"
-      - "spark/src/test/scala/org/apache/spark/sql/benchmark/**"
-      - "spark/src/main/scala/org/apache/comet/GenerateDocs.scala"
+    paths:
+      - "native/**"
   # manual trigger
   # https://docs.github.com/en/actions/managing-workflow-runs/manually-running-a-workflow
   workflow_dispatch:
diff --git a/.github/workflows/pr_missing_suites.yml b/.github/workflows/pr_missing_suites.yml
index cd89a651bd..02d291deb6 100644
--- a/.github/workflows/pr_missing_suites.yml
+++ b/.github/workflows/pr_missing_suites.yml
@@ -25,8 +25,20 @@ on:
   push:
     branches:
       - main
+    paths:
+      - "spark/src/test/**"
+      - "common/src/test/**"
+      - ".github/workflows/pr_build_linux.yml"
+      - ".github/workflows/pr_build_macos.yml"
+      - "dev/ci/check-suites.py"
   pull_request:
     types: [opened, synchronize, reopened]
+    paths:
+      - "spark/src/test/**"
+      - "common/src/test/**"
+      - ".github/workflows/pr_build_linux.yml"
+      - ".github/workflows/pr_build_macos.yml"
+      - "dev/ci/check-suites.py"
 
 jobs:
   check-missing-suites: