Skip unnecessary CI and Renovate updates for non-code changes

.github/workflows/build.yaml

@@ -20,6 +20,14 @@ on:
     branches:
       - main
       - release-*
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions: {}
 

.github/workflows/codeql-analysis.yml

@@ -17,7 +17,15 @@ name: CodeQL
 
 on:
   push:
-    branches: [ main ]
+    branches: [ main, release-* ]
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
   schedule:
     - cron: '45 10 * * 1'
 

.github/workflows/depsreview.yml

@@ -13,7 +13,17 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 name: 'Dependency Review'
-on: [pull_request]
+on:
+  pull_request:
+    branches: [ 'main', 'release-*' ]
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions:
   contents: read

.github/workflows/donotsubmit.yaml

@@ -3,6 +3,14 @@ name: Do Not Submit
 on:
   pull_request:
     branches: [ 'main', 'release-*' ]
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions: read-all
 

.github/workflows/e2e-coverage.yaml

@@ -16,9 +16,23 @@ name: E2E Coverage
 
 on:
   push:
-    branches: ['main']
+    branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
   pull_request:
-    branches: ['main']
+    branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions: {}
 

.github/workflows/kind-cluster-image-policy-no-tuf.yaml

@@ -17,6 +17,14 @@ name: Test policy-controller with ClusterImagePolicy TUF disabled
 on:
   pull_request:
     branches: [ 'main', 'release-*' ]
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 defaults:
   run:

.github/workflows/kind-cluster-image-policy-trustroot.yaml

@@ -17,6 +17,14 @@ name: Test policy-controller with TrustRoot - Bring your own keys
 on:
   pull_request:
     branches: [ 'main', 'release-*' ]
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 defaults:
   run:

.github/workflows/kind-cluster-image-policy-tsa.yaml

@@ -17,6 +17,14 @@ name: Test policy-controller with TSA
 on:
   pull_request:
     branches: [ 'main', 'release-*' ]
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 defaults:
   run:

.github/workflows/kind-cluster-image-policy.yaml

@@ -17,6 +17,14 @@ name: Test policy-controller with ClusterImagePolicy
 on:
   pull_request:
     branches: [ 'main', 'release-*' ]
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 defaults:
   run:

.github/workflows/kind-e2e-cosigned.yaml

@@ -18,6 +18,15 @@ on:
   pull_request:
     branches:
       - 'main'
+      - 'release-*'
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions: {}
 

.github/workflows/kind-e2e-trustroot-crd.yaml

@@ -18,6 +18,15 @@ on:
   pull_request:
     branches:
       - 'main'
+      - 'release-*'
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions: {}
 

.github/workflows/lint.yaml

@@ -3,7 +3,25 @@ on:
   push:
     branches:
       - main
+      - release-*
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
   pull_request:
+    branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions: {}
 

.github/workflows/policy-tester-examples.yml

@@ -19,7 +19,24 @@ on:
   workflow_dispatch:
   push:
     branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
   pull_request:
+    branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 jobs:
   verify:

.github/workflows/release-snapshot.yaml

@@ -2,6 +2,15 @@ name: snapshot
 
 on:
   pull_request:
+    branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions:
   contents: read

.github/workflows/scorecard_action.yml

@@ -6,7 +6,15 @@ on:
     # Weekly on Saturdays.
     - cron: '30 1 * * 6'
   push:
-    branches: [ main ]
+    branches: [ main, release-* ]
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 # Declare default permissions as read only.
 permissions: read-all

.github/workflows/style.yaml

@@ -3,6 +3,14 @@ name: Code Style
 on:
   pull_request:
     branches: [ 'main', 'release-*' ]
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions: read-all
 

.github/workflows/tests.yaml

@@ -18,7 +18,24 @@ on:
   workflow_dispatch:
   push:
     branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
   pull_request:
+    branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions: read-all
 

.github/workflows/verify-codegen.yaml

@@ -19,7 +19,24 @@ on:
   workflow_dispatch:
   push:
     branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
   pull_request:
+    branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions: read-all
 

.github/workflows/verify-docs.yaml

@@ -19,7 +19,22 @@ on:
   workflow_dispatch:
   push:
     branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'LICENSE'
+      - '*.md'
   pull_request:
+    branches: ['main', 'release-*']
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'LICENSE'
+      - '*.md'
 
 permissions: read-all
 

.github/workflows/whitespace.yaml

@@ -3,6 +3,14 @@ name: Whitespace
 on:
   pull_request:
     branches: [ 'main', 'release-*' ]
+    paths-ignore:
+      - 'Dockerfile.rh'
+      - 'Dockerfile.coverage'
+      - 'renovate.json'
+      - '.tekton/**'
+      - 'docs/**'
+      - 'LICENSE'
+      - '**/*.md'
 
 permissions: read-all