ci: skip QA and Spread workflows for security-scanner-only PRs
Metadata
Current evaluation
Merged. Added paths-ignore filters to qa.yaml and spread.yaml to skip QA and Spread CI pipelines for PRs only modifying security scanner configurations. Approved by two reviewers and successfully merged.
Suggested action: —
No scores available.
Issue body
PRs that only touch `.github/workflows/policy.yaml` or `.osv-scanner.toml` unnecessarily trigger the full QA and Spread CI pipelines.
## Changes
- **`qa.yaml`** — adds `paths-ignore` on `pull_request` trigger to skip when only the security scanner workflow or OSV config is changed
- **`spread.yaml`** — same, skips spread builds for security-scanner-only PRs
The `policy.yaml` workflow (which contains the `python-scans` security scanner job) retains no path filters, so it always runs on PRs including those that only touch these files.
Tested working at https://github.com/canonical/craft-application/pull/1132
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged. Added paths-ignore filters to qa.yaml and spread.yaml to skip QA and Spread CI pipelines for PRs only modifying security scanner configurations. Approved by two reviewers and successfully merged. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
10
Confidence:
95
|
needs review | Adds paths-ignore to qa.yaml and spread.yaml to skip CI workflows when only security scanner configs change. PR has two approvals, passing CI, and zero unresolved comments. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
15
Complexity:
10
Confidence:
95
|
close stale | Skips QA and Spread CI workflows for security-scanner-only changes. Author superseded this PR with #1132 for further testing and review. |
Update history
| Date | Change |
|---|---|
| updated |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1132 [WIP] ci: skip QA and Spread workflows for security-scanner-only PRs | craft-application | closed | Superseded and closed because the original PR #1131 has already landed. This draft PR was created to address feedback on #1131 but became unnecessary once the parent PR was merged. | |
| #716 ci: add security scan workflow | rockcraft | merged | Merged to add a CI security scan workflow. Approved by two reviewers, the change modifies three files to automate security checks in the pipeline. | |
| #56 ci: add security scanning workflow | craft-grammar | merged | Merged adds a CI workflow for security scanning. Approved by two reviewers, the change introduces a single configuration file to automate pipeline security checks. | |
| #218 ci: add security scan workflow | craft-store | merged | Merged to add a CI security scan workflow. Approved by two reviewers, the change introduces thirteen lines across one file to automate pipeline security checks. | |
| #128 ci: add security scan workflow | craft-archives | merged | Merged a change adding a security scan workflow to the CI pipeline. Approved by two reviewers, the update adds 15 lines across one file to automate security checks. | |
| #557 ci: set read permissions for qa workflow | starbase | merged | Merged updates granting explicit read permissions to the QA workflow. This allows internal projects to run GitHub API-dependent actions like paths-filter. Approved by two reviewers with all CI checks passing. | |
| #2701 ci: filter in qa workflow | charmcraft | merged | Merged. Adds a filter to the QA workflow and passes it to the lint workflow. Approved by two reviewers. Tests are intentionally skipped to be verified before merge. | |
| #185 ci: fix security scanner | debcraft | merged | Merged a one-line change to fix the CI security scanner. Approved by one reviewer and passing all CI checks, the pull request was successfully integrated. | |
| #276 ci: add security scan workflow | craft-cli | merged | Merged addition of a CI security scan workflow. Approved by two reviewers, the change introduces a new workflow file to automate security checks. | |
| #1924 ci: add security scan workflow | charmcraft | merged | Merged following approval by two reviewers. Introduces a CI security scan workflow, adding automated vulnerability checks across two files with 24 lines of configuration. |