T6564: workflow trigger restrictions for circinus (#3802)

8 files changed, 31 insertions, 7 deletions

diff --git a/.github/workflows/auto-author-assign.yml b/.github/workflows/auto-author-assign.yml
index 61612cce3..2830bd585 100644
--- a/.github/workflows/auto-author-assign.yml
+++ b/.github/workflows/auto-author-assign.yml
@@ -10,5 +10,5 @@ permissions:
 
 jobs:
   assign-author:
-    uses: vyos/.github/.github/workflows/assign-author.yml@current
+    uses: vyos/.github/.github/workflows/assign-author.yml@circinus
     secrets: inherit
diff --git a/.github/workflows/build-package.yml b/.github/workflows/build-package.yml
index bdad7db04..e988cd28a 100644
--- a/.github/workflows/build-package.yml
+++ b/.github/workflows/build-package.yml
@@ -3,6 +3,10 @@ on:
   pull_request:
     branches:
       - circinus
+    paths:
+      - '**'
+      - '!.github/**'
+      - '!**/*.md'
 
 jobs:
   package-build:
diff --git a/.github/workflows/chceck-pr-message.yml b/.github/workflows/chceck-pr-message.yml
index fda5696c9..27da5e9fc 100644
--- a/.github/workflows/chceck-pr-message.yml
+++ b/.github/workflows/chceck-pr-message.yml
@@ -13,5 +13,5 @@ permissions:
 
 jobs:
   check-pr-title:
-    uses: vyos/.github/.github/workflows/check-pr-message.yml@current
+    uses: vyos/.github/.github/workflows/check-pr-message.yml@circinus
     secrets: inherit
diff --git a/.github/workflows/check-pr-conflicts.yml b/.github/workflows/check-pr-conflicts.yml
index f09e66415..41efc4601 100644
--- a/.github/workflows/check-pr-conflicts.yml
+++ b/.github/workflows/check-pr-conflicts.yml
@@ -10,5 +10,5 @@ permissions:
 
 jobs:
   check-pr-conflict-call:
-    uses: vyos/.github/.github/workflows/check-pr-merge-conflict.yml@current
+    uses: vyos/.github/.github/workflows/check-pr-merge-conflict.yml@circinus
     secrets: inherit
diff --git a/.github/workflows/check-stale.yml b/.github/workflows/check-stale.yml
index 2adbee2f6..ca019eb63 100644
--- a/.github/workflows/check-stale.yml
+++ b/.github/workflows/check-stale.yml
@@ -9,5 +9,5 @@ permissions:
 
 jobs:
   stale:
-    uses: vyos/.github/.github/workflows/check-stale.yml@current
+    uses: vyos/.github/.github/workflows/check-stale.yml@circinus
     secrets: inherit
diff --git a/.github/workflows/check-unused-imports.yml b/.github/workflows/check-unused-imports.yml
index 29f7426ce..e1f4df11d 100644
--- a/.github/workflows/check-unused-imports.yml
+++ b/.github/workflows/check-unused-imports.yml
@@ -3,6 +3,10 @@ on:
   pull_request_target:
     branches:
       - circinus
+    paths:
+      - '**'
+      - '!.github/**'
+      - '!**/*.md'
   workflow_dispatch:
 
 permissions:
@@ -11,5 +15,5 @@ permissions:
 
 jobs:
   check-unused-imports:
-    uses: vyos/.github/.github/workflows/check-unused-imports.yml@current
+    uses: vyos/.github/.github/workflows/check-unused-imports.yml@circinus
     secrets: inherit
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 0a7c18ba6..c04806c5c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -3,9 +3,17 @@ name: "Perform CodeQL Analysis"
 on:
   push:
     branches: [ "circinus" ]
-  pull_request:
+    paths:
+      - '**'
+      - '!.github/**'
+      - '!**/*.md'
+  pull_request_target:
     # The branches below must be a subset of the branches above
     branches: [ "circinus" ]
+    paths:
+      - '**'
+      - '!.github/**'
+      - '!**/*.md'
   schedule:
     - cron: '22 10 * * 0'
 
@@ -16,7 +24,7 @@ permissions:
 
 jobs:
   codeql-analysis-call:
-    uses: vyos/.github/.github/workflows/codeql-analysis.yml@current
+    uses: vyos/.github/.github/workflows/codeql-analysis.yml@circinus
     secrets: inherit
     with:
       languages: "['python']"
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index d59460fe2..366d47199 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -3,8 +3,16 @@ on:
   push:
     branches:
       - circinus-stream
+    paths:
+      - '**'
+      - '!.github/**'
+      - '!**/*.md'
   pull_request_target:
     types: [opened, synchronize, reopened]
+    paths:
+      - '**'
+      - '!.github/**'
+      - '!**/*.md'
 jobs:
   sonar-cloud:
     name: SonarCloud