[ITEP-71370] Remove Coverity on PRs + Improve BAT workflow (#234)

## 📝 Description

Remove Coverity on PRs + Improve BAT workflow

This PR removes Coverity static analysis from pull request triggers and
enhances the BAT (Basic Acceptance Tests) workflow with draft PR
detection. The changes focus on optimizing CI/CD pipeline execution by
preventing certain workflows from running on draft PRs and reducing
unnecessary analysis on PRs.

- Remove Coverity static analysis trigger on pull requests while keeping
it for main branch pushes
- Add draft PR detection logic to skip BAT workflow execution for draft
PRs
- Remove push triggers from BAT and CodeQL workflows to focus on
PR-based execution

<!--
If the PR addresses a specific GitHub issue, include one of the
following lines to enable auto-closing:
Fixes #<issue_number>
Closes #<issue_number>

If referencing an internal ticket (e.g. JIRA), include the ticket number
instead:
JIRA: <project-key>-<ticket-number>

If there’s no related issue or ticket, you can skip this section.
-->

## ✨ Type of Change

Select the type of change your PR introduces:

- [ ] 🐞 **Bug fix** – Non-breaking change which fixes an issue
- [ ] 🚀 **New feature** – Non-breaking change which adds functionality
- [ ] 🔨 **Refactor** – Non-breaking change which refactors the code base
- [ ] 💥 **Breaking change** – Changes that break existing functionality
- [ ] 📚 **Documentation update**
- [ ] 🔒 **Security update**
- [x] 🧪 **Tests**
- [x] 🚂 **CI**

## 🧪 Testing Scenarios

Describe how the changes were tested and how reviewers can test them
too:

- [ ] ✅ Tested manually
- [ ] 🤖 Ran automated end-to-end tests

## ✅ Checklist

Before submitting the PR, ensure the following:

- [ ] 🔍 PR title is clear and descriptive
- [ ] 📝 For internal contributors: If applicable, include the JIRA
ticket number (e.g., ITEP-123456) in the PR **title**. Do **not**
include full URLs
- [ ] 💬 I have commented my code, especially in hard-to-understand areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ✅ I have added tests that prove my fix is effective or my feature
works

---------

Co-authored-by: Copilot <[email protected]>

Author: dmytroye

.github/workflows/codeql.yml

@@ -20,6 +20,7 @@ on:
   push:
     branches:
       - main
+
 permissions: {}
 
 jobs:

.github/workflows/coverity.yml

@@ -8,14 +8,6 @@ run-name: "[Code Analysis] Coverity (C/C++)"
 on:
   workflow_call: {}
   workflow_dispatch: {}
-  pull_request:
-    branches:
-      - main
-      - release-*
-    types:
-      - opened
-      - synchronize
-      - reopened
   push:
     branches:
       - main

.github/workflows/tests-bat.yml

@@ -47,15 +47,68 @@ permissions:
   contents: read
 
 jobs:
+  check-pr-state:
+    name: "Check PR State"
+    runs-on: ubuntu-latest
+    outputs:
+      pr_state: ${{ steps.check_pr.outputs.pr_state }}
+    steps:
+      - name: Checkout code
+        if: ${{ github.event_name == 'pull_request' }}
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: "Set up GitHub CLI"
+        if: ${{ github.event_name == 'pull_request' }}
+        run: |
+          sudo apt-get update && sudo apt-get install gh
+
+      - name: "Check PR state"
+        id: check_pr
+        if: ${{ github.event_name == 'pull_request' }}
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          PR_NUMBER=${{ github.event.number }}
+          PR_STATE=$(gh pr view $PR_NUMBER --json isDraft --jq '.isDraft')
+          echo "pr_state=$PR_STATE" >> $GITHUB_OUTPUT
+          echo "PR State \"isDraft\": $PR_STATE"
+
+      - name: "Return success if triggered manually"
+        if: ${{ github.event_name == 'workflow_dispatch' }}
+        run: |
+          echo "Triggered manually."
+          exit 0
+
   run-basic-acceptance-tests:
     name: "Run Basic Acceptance Tests"
     runs-on: [self-hosted]
     timeout-minutes: ${{ fromJSON(inputs.timeout || '40') }}
+    needs: check-pr-state
     steps:
+      - name: "Fail if PR is in draft state"
+        if: ${{ github.event_name == 'pull_request' && needs.check-pr-state.outputs.pr_state == 'true' }}
+        run: |
+          echo "Tests are skipped because the PR is in draft state."
+          echo "Please mark the PR as ready for review to run the Basic Acceptance Tests."
+          echo "If you want to run the tests manually, you can use the 'workflow_dispatch' event."
+          exit 1
+
+      - name: Fail if PR has no 'run-bat' label
+        if: ${{ github.event_name == 'pull_request'  && !contains(github.event.pull_request.labels.*.name, 'run-bat') }}
+        run: |
+          echo "Tests are skipped because the PR does not have the 'run-bat' label."
+          echo "Please add the 'run-bat' label to run the Basic Acceptance Tests."
+          echo "If you want to run the tests manually, you can use the 'workflow_dispatch' event."
+          exit 1
+
       - name: "Checkout Repository"
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: "Remove all Docker images"
         if: ${{ github.event.inputs.cleanup == 'true' }}