build: limit github workflow triggers

Author: anonrig

.github/workflows/alpine.yml

@@ -1,6 +1,17 @@
 name: Alpine Linux
 
-on: [push, pull_request]
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
 
 jobs:
   ubuntu-build:

.github/workflows/lint_and_format_check.yml

@@ -1,6 +1,17 @@
 name: Lint and Format Check (Ubuntu Latest)
 
-on: [push, pull_request]
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
 
 permissions:
   contents: read
@@ -26,4 +37,4 @@ jobs:
       - uses: chartboost/ruff-action@v1
         name: Lint with Ruff
         with:
-          version: 0.0.261
+          version: 0.0.263

.github/workflows/release-script-tests.yml

@@ -3,15 +3,20 @@ name: Release Script Tests
 on:
   # workflow_call is used to indicate that a workflow can be called by another workflow. 
   workflow_call:
-  push:
-    branches:
-      - "*"
   pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+  push:
     branches:
-      - "*"
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   release-script-test:

.github/workflows/release_create.yml

@@ -3,6 +3,8 @@ name: Release Create Workflow
 on:
   pull_request:
     types: [closed]
+  branches:
+    - "release/v**"
 
 permissions:
   contents: write

.github/workflows/scorecard.yml

@@ -10,10 +10,7 @@ on:
   # To guarantee Maintained check is occasionally updated. See
   # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
   schedule:
-    - cron: '16 21 * * 1'
-  push:
-    branches:
-      - main
+    - cron: '0 0 * * 1'
 
 # Declare default permissions as read only.
 permissions: read-all

.github/workflows/ubuntu-release.yml

@@ -1,15 +1,23 @@
 name: Ubuntu 22.04 (Release build)
 
-on: [push, pull_request]
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
 
 permissions:
   contents: read
 
 jobs:
   ubuntu-release-build:
-    if: >-
-      ! contains(toJSON(github.event.commits.*.message), '[skip ci]') &&
-      ! contains(toJSON(github.event.commits.*.message), '[skip github]')
     runs-on: ubuntu-22.04
     strategy:
       matrix:

.github/workflows/ubuntu-s390x.yml

@@ -1,12 +1,17 @@
 name: Ubuntu s390x (GCC 11)
 
 on:
-  push:
-    branches:
-      - main
   pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+  push:
     branches:
       - main
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
 
 permissions:
   contents: read

.github/workflows/ubuntu-sanitized.yml

@@ -1,6 +1,17 @@
 name: Ubuntu 22.04 (GCC 12 SANITIZED)
 
-on: [push, pull_request]
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
 
 permissions:
   contents: read

.github/workflows/ubuntu-undef.yml

@@ -1,6 +1,17 @@
 name: Ubuntu 22.04 (GCC 12 SANITIZED)
 
-on: [push, pull_request]
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
 
 permissions:
   contents: read

.github/workflows/ubuntu.yml

@@ -1,6 +1,17 @@
 name: Ubuntu 22.04
 
-on: [push, pull_request]
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - '**.md'
+      - 'docs/**'
 
 permissions:
   contents: read