From baf70a020c57bb0366e8c315aed566b61fe61738 Mon Sep 17 00:00:00 2001
From: Anil Belur <abelur@linuxfoundation.org>
Date: Thu, 4 Jun 2026 09:34:32 +1000
Subject: [PATCH] Chore: add path filters to testing.yaml for pull_request
 trigger
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Problem:
The testing.yaml workflow triggers on ALL pull_request events regardless
of which files changed. Across the lfreleng-actions org, 75% of
Dependabot PRs (74 of 98 at last audit) only bump SHA pins in
.github/workflows/ files — yet each one triggers the full integration
test suite unnecessarily.

This wastes 65%+ of CI compute on test runs that can never catch a
regression because no source code, dependencies, or tests changed.

Solution:
Add path filters using the same denylist (opt-out) convention already
used by build-test.yaml across the org (dependamerge, gerrit-clone-action,
gha-workflow-linter, lftools-uv, github2gerrit-action):
  paths:
    - '**'
    - '!.github/**'
    - '!.*'
    - '!tox.ini'

This approach:
- Matches the existing org convention
- Fails open (worst case: a few extra CI minutes) rather than failing
  closed (allowlist silently stops running tests if layout changes)
- Is universal and templatable from actions-template without per-repo
  customization across 55+ repos of varying languages

Impact:
- Before: Every Dependabot PR triggers full integration tests
- After: Only source/dependency changes trigger tests
- Savings: ~65% reduction in unnecessary CI compute

Signed-off-by: Anil Belur <askb23@gmail.com>

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Anil Belur <abelur@linuxfoundation.org>
---
 .github/workflows/testing.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/testing.yaml b/.github/workflows/testing.yaml
index e00e301..c0563c8 100644
--- a/.github/workflows/testing.yaml
+++ b/.github/workflows/testing.yaml
@@ -11,6 +11,11 @@ on:
     branches: ['main']
   pull_request:
     branches: ['main']
+    paths:
+      - '**'
+      - '!.github/**'
+      - '!.*'
+      - '!tox.ini'
 
 concurrency:
   group: "${{ github.workflow }}-${{ github.ref }}"