Skip to content

ci: remove yml from paths-ignore to ensure workflow changes trigger CI#2

Open
huth-stacks wants to merge 1 commit into
developfrom
ci/P1-fix-paths-ignore
Open

ci: remove yml from paths-ignore to ensure workflow changes trigger CI#2
huth-stacks wants to merge 1 commit into
developfrom
ci/P1-fix-paths-ignore

Conversation

@huth-stacks

Copy link
Copy Markdown
Owner

What

Remove **.yml from the CI push trigger's paths-ignore so workflow file changes are always validated.

Why

The ci.yml workflow has paths-ignore: ["**.md", "**.yml"] on the push trigger. This means pushes to master/develop/next that only modify .yml files — including the CI workflow files themselves — silently skip CI entirely. This is a security and correctness blind spot.

The Change

In .github/workflows/ci.yml, delete one line:

-      - "**.yml"

1 line deleted in 1 file.

How to Verify

  • After merge, push a commit to develop that only modifies a .yml file
  • CI should trigger (currently it does not)

Metrics to Track

  • No timing impact expected — this is a correctness fix

Security Checklist

  • No new permissions granted
  • No secrets exposure
  • This IS a security hardening — removes CI bypass vector

Part of CI Optimization Series

PR 1 of 7. Correctness fix — no timing impact.

The paths-ignore block excluded **.yml files, which meant pushes
to master/develop/next containing only workflow file changes would
silently skip CI. Remove this exclusion so workflow changes are
always validated.
@huth-stacks huth-stacks added the no changelog Skip changelog fragment check label Mar 24, 2026
@huth-stacks huth-stacks reopened this Mar 24, 2026
@huth-stacks huth-stacks reopened this Mar 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

no changelog Skip changelog fragment check

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant