Skip to content

ci: restrict guix build to tagged pushes and labeled PRs only#7194

Closed
thepastaclaw wants to merge 1 commit intodashpay:developfrom
thepastaclaw:ci/guix-label-gate
Closed

ci: restrict guix build to tagged pushes and labeled PRs only#7194
thepastaclaw wants to merge 1 commit intodashpay:developfrom
thepastaclaw:ci/guix-label-gate

Conversation

@thepastaclaw
Copy link

Summary

Restrict the Guix Build CI workflow to only trigger on:

  • Tagged pushes (release tags)
  • PRs with the guix-build label
  • Weekly schedule (Sunday 3 AM UTC)

Previously, the workflow triggered on all push events (every branch push), relying on the job-level if condition to skip non-tag pushes. While functionally correct, this created unnecessary skipped workflow runs on every PR update.

Changes

  • Add tags: ['*'] filter to the push trigger, so only tag pushes fire the workflow
  • The existing job-level if condition is kept as defense-in-depth

Testing

No functional change — the workflow already skipped non-tag branch pushes via the if condition. This change prevents the workflow from being triggered at all on branch pushes.

Previously, the Guix Build workflow triggered on all push events
(branches and tags), relying solely on the job-level `if` condition
to skip non-tag branch pushes. This caused unnecessary workflow runs
to appear (as skipped) on every PR push.

Restrict the push trigger to tags only, so the workflow is never
triggered by regular branch pushes. The existing job-level condition
is kept as defense-in-depth.

For PRs, the workflow continues to require the `guix-build` label.
@github-actions
Copy link

github-actions bot commented Mar 3, 2026

✅ No Merge Conflicts Detected

This PR currently has no conflicts with other open PRs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants