[ARCH-333] Update keystore github workflow settings (#1685)

Author: pavel-raykov

.github/workflows/keystore.yml

@@ -2,17 +2,34 @@ name: Keystore Checks
 permissions:
   contents: read
 
-on:
-  push:
-    paths:
-      - "keystore/**"
+on: push
 
 jobs:
+  changes:
+    name: detect changes
+    runs-on: ubuntu-latest
+    outputs:
+      keystore-src: ${{ steps.keystore-changes.outputs.src }}
+    steps:
+      - name: Checkout the repo
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        id: keystore-changes
+        with:
+          filters: |
+            src:
+            - 'keystore/**'
+
   run-tests:
+    name: run tests
+    runs-on: ubuntu-latest
+    needs: changes
+    if: needs.changes.outputs.keystore-src == 'true'
     defaults:
       run:
         working-directory: keystore
-    runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -30,7 +47,13 @@ jobs:
         run: go test ./... -coverpkg=./... -coverprofile=coverage.txt
 
   build-race-tests:
+    name: race tests
     runs-on: ubuntu-latest
+    needs: changes
+    if: needs.changes.outputs.keystore-src == 'true'
+    defaults:
+      run:
+        working-directory: keystore
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -61,4 +84,17 @@ jobs:
         with:
           name: go-race-results
           path: |
-            ./race.*
+            ./race.*
+
+  gate:
+    name: summary gate
+    runs-on: ubuntu-latest
+    needs: [changes, run-tests, build-race-tests]
+    if: always()
+    steps:
+      - name: Fail if any job ran and failed
+        if: needs.changes.outputs.keystore-src == 'true' &&
+          (needs.run-tests.outcome != 'success' || 
+           needs.build-race-tests.outcome != 'success')
+        run: exit 1
+