chore: only run fuzzers on certain file changes (#9246)

The `bazel-run-fuzzers` takes ~8 minutes. We shouldn't need to wait for
that if no code that's an input to that job has changed. So this adds a
condition to the steps to only run them if the following files have been
modified:

- `.github/workflows/ci-main.yml`
- `ci/container/TAG`
- `bin/fuzzing/run-all-fuzzers.sh`
- `**/BUILD.bazel`
- `**/*.bzl`
- `**/*.rs`

---------

Co-authored-by: venkkatesh-sekar <94061546+venkkatesh-sekar@users.noreply.github.com>

Author: basvandijk

.github/workflows/ci-main.yml

@@ -37,14 +37,30 @@ jobs:
         with:
           fetch-depth: ${{ github.event_name == 'pull_request' && 256 || 0 }}
           ref: ${{ inputs.commit-sha }}
+      - name: Filter fuzzer related files
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
+        id: filter
+        with:
+          ref: ${{ inputs.commit-sha }}
+          filters: |
+            fuzzers:
+              - ".github/workflows/ci-main.yml"
+              - "ci/container/TAG"
+              - "bin/fuzzing/*.sh"
+              - "**/BUILD.bazel"
+              - "**/*.bzl"
+              - "**/*.rs"
       - uses: ./.github/actions/netrc
+        if: steps.filter.outputs.fuzzers == 'true'
       - name: Run Libfuzzer targets
         uses: ./.github/actions/bazel
+        if: steps.filter.outputs.fuzzers == 'true'
         with:
           invocation-names: libfuzzer
           run: ./bin/fuzzing/run-all-fuzzers.sh --libfuzzer 100
       - name: Run AFL targets
         uses: ./.github/actions/bazel
+        if: steps.filter.outputs.fuzzers == 'true'
         with:
           invocation-names: afl
           run: ./bin/fuzzing/run-all-fuzzers.sh --afl 10