ci: use paths to restrict workflow runs

.github/workflows/ci.yml

@@ -23,7 +23,15 @@ on:
   push:
     branches:
       - main
+    paths:
+      - "*.go"
+      - "go.mod"
+      - "go.sum"
   pull_request:
+    paths:
+      - "*.go"
+      - "go.mod"
+      - "go.sum"
 jobs:
   ci:
     strategy:
@@ -36,12 +44,15 @@ jobs:
           git config --global core.autocrlf false
           git config --global core.eol lf
         if: matrix.os == 'windows-latest'
+
       - name: Checkout
         uses: actions/checkout@v3
+
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
           go-version: 1.18
+
       - name: Cache Go
         uses: actions/cache@v3
         with:
@@ -51,24 +62,29 @@ jobs:
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
           restore-keys: |
             ${{ runner.os }}-go-
+
       - name: Install Task
         uses: arduino/setup-task@v1
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Test
         run: task test
+
       - name: Build
         run: task build
+
       # All static checks from this point should run on linux as it is the
       # fastest platform
       - name: Integration Test
         if: matrix.os == 'ubuntu-latest'
         run: task integration-test
+
       - name: Lint Code
         if: matrix.os == 'ubuntu-latest'
         uses: golangci/[email protected]
         with:
           skip-go-installation: true
+
       - name: misspell
         if: matrix.os == 'ubuntu-latest'
         uses: reviewdog/action-misspell@v1
@@ -82,6 +98,7 @@ jobs:
             ./Taskfile.yaml
             ./.github/workflows/**
             ./CODE_OF_CONDUCT.md
+
       - name: Code Coverage
         if: matrix.os == 'ubuntu-latest'
         uses: codecov/codecov-action@v3

.github/workflows/codeql.yml

@@ -22,10 +22,13 @@ name: code-quality
 
 on:
   push:
-    branches: [main]
+    branches:
+      - main
+    paths:
+      - "*.go"
   pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [main]
+    paths:
+      - "*.go"
   schedule:
     - cron: "36 4 * * 6"
 
@@ -47,7 +50,6 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v3
 
-      # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v2
         with:

.github/workflows/dependency-review.yml

@@ -31,5 +31,6 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v3
+
       - name: Dependency Review
         uses: actions/dependency-review-action@v2

.github/workflows/docs.yml

@@ -28,8 +28,6 @@ on:
       - ".github/workflows/docs.yml"
       - "docs/**"
       - "mkdocs.yml"
-  # Allow the workflow to be triggered manually
-  workflow_dispatch:
 jobs:
   build-docs:
     runs-on: ubuntu-latest

.github/workflows/git-secrets.yml

@@ -37,6 +37,7 @@ jobs:
         uses: actions/checkout@v3
         with:
           fetch-depth: 0
+
       - name: GitGuardian
         uses: GitGuardian/gg-shield-action@master
         env:

.github/workflows/release.yml

@@ -36,10 +36,12 @@ jobs:
         uses: actions/checkout@v3
         with:
           fetch-depth: 0
+
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
           go-version: 1.18
+
       - uses: actions/cache@v3
         with:
           path: |
@@ -48,10 +50,13 @@ jobs:
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
           restore-keys: |
             ${{ runner.os }}-go-
+
       - name: Install Cosign
         uses: sigstore/cosign-installer@main
+
       - name: Download Syft
         uses: anchore/sbom-action/download-syft@v0
+
       - name: GoReleaser
         uses: goreleaser/goreleaser-action@v3
         with:

.github/workflows/uplift.yml

@@ -31,6 +31,7 @@ jobs:
         with:
           fetch-depth: 0
           token: ${{ secrets.GH_UPLIFT }}
+
       - name: Release
         uses: gembaadvantage/[email protected]
         with: