Skip to content

GitHub: Private repo workflow exclusions - #1617

Merged
roosterfish merged 6 commits into
canonical:mainfrom
roosterfish:private_repo_exclusions
Oct 19, 2026
Merged

roosterfish merged 6 commits into
canonical:mainfrom
roosterfish:private_repo_exclusions

Conversation

@roosterfish

Copy link
Copy Markdown
Contributor

Excludes a few workflows/jobs from being executed on the microcloud-private repository. Aligned with LXD.

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Disable unnecessary coverage collection for private manual workflow runs where uploads are skipped.

1 open issue
What changed in this PR

Excludes selected workflows and jobs from running in canonical/microcloud-private, aligned with LXD.

Changes:

  • Restricts triage, CodeQL, security scans, and scheduled tests to canonical/microcloud.
  • Adjusts zizmor settings and coverage uploads by repository.
File Summary
.github/​workflows/​zizmor.yml Adjusts zizmor settings by repository.
.github/​workflows/​triage.yml Restricts PR labeling.
.github/​workflows/​tests.yml Restricts scheduled jobs and coverage uploads; coverage collection remains enabled for private manual runs.
.github/​workflows/​security.yml Restricts scheduled security scans.
.github/​workflows/​codeql.yml Restricts CodeQL analysis.
.github/​actions/​system-test/​action.yml Restricts system-test coverage uploads.

Review effort: Lite

Comment thread .github/workflows/tests.yml Outdated
Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
@roosterfish
roosterfish force-pushed the private_repo_exclusions branch from 1b4146f to bf12c99 Compare October 19, 2026 10:32
@roosterfish
roosterfish marked this pull request as ready for review October 19, 2026 10:37
@tugbataluy

Copy link
Copy Markdown
Contributor

Nice alignment with LXD, thanks! Two small things in bf12c99ae4bc1308f0d519982f2c9c1b781f9841 in the message itself :

  • Subject says zimor, the workflow is zizmor.
  • Trailer says Inspried-by.

Suggested message:

github/workflows/zizmor: Use advanced security only on main repo

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Inspired-by: Simon Deziel <simon.deziel@canonical.com>

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Inspired-by: Simon Deziel <simon.deziel@canonical.com>
@roosterfish
roosterfish force-pushed the private_repo_exclusions branch from bf12c99 to da2ddfb Compare October 19, 2026 12:41
@roosterfish

Copy link
Copy Markdown
Contributor Author

Two small things in bf12c99ae4bc1308f0d519982f2c9c1b781f9841 in the message itself :

Thanks @tugbataluy for spotting, fixed now.

@roosterfish
roosterfish merged commit 93d915f into canonical:main Oct 19, 2026
31 checks passed
@roosterfish
roosterfish deleted the private_repo_exclusions branch October 19, 2026 13:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants