ci: gate heavy workflows to tags and explicit flags/labels

Author: zy84338719

.github/workflows/build.yml

@@ -2,11 +2,11 @@ name: Build and Release
 
 on:
   push:
+    # Only trigger the heavy multi-platform build on version tag pushes (e.g. v1.9.1)
     tags:
       - 'v*'
-    branches: [ main ]
-  pull_request:
-    branches: [ main ]
+  # Allow manual dispatch for ad-hoc builds from the UI
+  workflow_dispatch:
 
 permissions:
   contents: read

.github/workflows/ci.yml

@@ -5,6 +5,8 @@ on:
     branches: [ main, develop ]
   pull_request:
     branches: [ main, develop ]
+  # Allow manual runs
+  workflow_dispatch:
 
 jobs:
   test:
@@ -102,7 +104,14 @@ jobs:
     name: Docker Test
     runs-on: ubuntu-latest
     needs: test
-    if: github.event_name == 'push'
+    # Run Docker Test only when explicitly requested via commit message flag
+    # (e.g., include [docker-test] in the commit message) or when running on tags/branches on CI
+    # Run when explicitly requested by commit message, PR label, tag push, or manual dispatch
+    if: |
+      contains(github.event.head_commit.message, '[docker-test]') ||
+      startsWith(github.ref, 'refs/tags/') ||
+      github.event_name == 'workflow_dispatch' ||
+      (github.event_name == 'pull_request' && contains(join(github.event.pull_request.labels.*.name, ','), 'run-full-ci'))
     
     steps:
     - name: Checkout code
@@ -148,7 +157,13 @@ jobs:
   security:
     name: Security Scan
     runs-on: ubuntu-latest
-    if: github.event_name == 'push'
+    # Run Security Scan only when explicitly requested via commit message flag
+    # (e.g., include [security-scan] in the commit message) or when running manually
+    # Run when explicitly requested by commit message, PR label, or manual dispatch
+    if: |
+      contains(github.event.head_commit.message, '[security-scan]') ||
+      github.event_name == 'workflow_dispatch' ||
+      (github.event_name == 'pull_request' && contains(join(github.event.pull_request.labels.*.name, ','), 'run-security'))
     
     steps:
     - name: Checkout code