ci: adapt paths filtering

Author: tawadaa

.github/workflows/benchmark_coprocessor.yml renamed to .github/workflows/coprocessor_benchmark-cpu.yml

@@ -2,19 +2,34 @@ name: Rust tests
 
 on:
   pull_request:
-    paths:
-      - .github/workflows/cargo-tests.yml
-      - fhevm-engine/**
-      - proto/**
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref }}
-  cancel-in-progress: true
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
+  check-changes:
+    permissions:
+      actions: 'read'
+      contents: 'read'
+      pull-requests: 'read'
+    runs-on: ubuntu-latest
+    outputs:
+      changes-rust-files: ${{ steps.filter.outputs.rust-files }}
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # v3.0.2
+        id: filter
+        with:
+          filters: |
+            rust-files:
+              - .github/workflows/coprocessor_cargo-tests.yml
+              - fhevm-engine/**
+              - proto/**
   cargo-tests:
+    needs: check-changes
+    if: ${{ needs.check-changes.outputs.changes-rust-files == 'true' }}
     runs-on: large_ubuntu_16
-
     steps:
     - name: Checkout code
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

.github/workflows/benchmark_coprocessor_gpu.yml renamed to .github/workflows/coprocessor_benchmark-gpu.yml

@@ -2,16 +2,32 @@ name: Dependency analysis
 
 on:
   pull_request:
-    paths-ignore:
-    - "deployments/**"
-    - "hardhat/**"
 
 concurrency:
   group: deps-analysis-${{ github.ref }}
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
+  check-changes:
+    permissions:
+      actions: 'read'
+      contents: 'read'
+      pull-requests: 'read'
+    runs-on: ubuntu-latest
+    outputs:
+      changes-rust-files: ${{ steps.filter.outputs.rust-files }}
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # v3.0.2
+        id: filter
+        with:
+          filters: |
+            rust-files:
+              - .github/workflows/coprocessor_dependency-analysis.yml
+              - fhevm-engine/**
   dependencies-check:
+    needs: check-changes
+    if: ${{ needs.check-changes.outputs.changes-rust-files == 'true' }}
     runs-on: ubuntu-latest
     steps:
 

.github/workflows/cargo-tests.yml renamed to .github/workflows/coprocessor_cargo-tests.yml

@@ -2,27 +2,39 @@ name: "Docker - fhevm Coprocessor"
 
 on:
   pull_request:
-    paths:
-      - .github/workflows/docker-coprocessor.yml
-      - fhevm-engine/**
-      - proto/**
   push:
     branches:
       - main
-    paths:
-      - .github/workflows/docker-coprocessor.yml
-      - fhevm-engine/**
-      - proto/**
   release:
     types:
       - published
 
 concurrency:
   group: fhevm-coprocessor-${{ github.ref_name }}
-  cancel-in-progress: false
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
+  check-changes:
+    permissions:
+      actions: 'read'
+      contents: 'read'
+      pull-requests: 'read'
+    runs-on: ubuntu-latest
+    outputs:
+      changes-coprocessor-files: ${{ steps.filter.outputs.coprocessor-files }}
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # v3.0.2
+        id: filter
+        with:
+          filters: |
+            coprocessor-files:
+              - .github/workflows/coprocessor_docker-build.yml
+              - fhevm-engine/**
+              - proto/**
   docker-fhevm-coprocessor:
+    needs: check-changes
+    if: ${{ needs.check-changes.outputs.changes-coprocessor-files == 'true' || github.event_name == 'release' }}
     uses: zama-ai/ci-templates/.github/workflows/docker_common.yml@44333c96991d6747e0bef6a3308bfd98b20390f8 # main
     secrets:
       GHCR_ACTION_TOKEN: ${{ secrets.BLOCKCHAIN_ACTIONS_TOKEN }}

.github/workflows/dependency_analysis.yml renamed to .github/workflows/coprocessor_dependency-analysis.yml

@@ -2,25 +2,38 @@ name: "Docker - fhevm DB migration"
 
 on:
   pull_request:
-    paths:
-      - .github/workflows/docker-db-migration.yml
-      - fhevm-engine/fhevm-db/**
   push:
     branches:
       - main
-    paths:
-      - .github/workflows/docker-db-migration.yml
-      - fhevm-engine/fhevm-db/**
   release:
     types:
       - published
 
 concurrency:
   group: fhevm-db-migration-${{ github.ref_name }}
-  cancel-in-progress: false
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
+  check-changes:
+    permissions:
+      actions: 'read'
+      contents: 'read'
+      pull-requests: 'read'
+    runs-on: ubuntu-latest
+    outputs:
+      changes-db-migration-files: ${{ steps.filter.outputs.db-migration-files }}
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # v3.0.2
+        id: filter
+        with:
+          filters: |
+            db-migration-files:
+              - .github/workflows/coprocessor_docker-build_db-migration.yml
+              - fhevm-engine/fhevm-db/**
   docker-fhevm-db-migration:
+    needs: check-changes
+    if: ${{ needs.check-changes.outputs.changes-db-migration-files == 'true' || github.event_name == 'release' }}
     uses: zama-ai/ci-templates/.github/workflows/docker_common.yml@44333c96991d6747e0bef6a3308bfd98b20390f8 # main
     secrets:
       GHCR_ACTION_TOKEN: ${{ secrets.BLOCKCHAIN_ACTIONS_TOKEN }}

.github/workflows/docker-coprocessor.yml renamed to .github/workflows/coprocessor_docker-build.yml

@@ -15,37 +15,9 @@ on:
   # Allows you to run this workflow manually from the Actions tab as an alternative.
   workflow_dispatch:
   pull_request:
-    paths:
-      - fhevm-engine/Cargo.toml
-      - fhevm-engine/coprocessor/Cargo.toml
-      - fhevm-engine/coprocessor/build.rs
-      - fhevm-engine/coprocessor/src/**
-      - fhevm-engine/executor/Cargo.toml
-      - fhevm-engine/executor/build.rs
-      - fhevm-engine/executor/src/**
-      - fhevm-engine/scheduler/src/**
-      - fhevm-engine/scheduler/Cargo.toml
-      - fhevm-engine/scheduler/build.rs
-      - proto/**
-      - '.github/workflows/gpu-tests.yml'
-      - ci/slab.toml
   push:
     branches:
       - main
-    paths:
-      - fhevm-engine/Cargo.toml
-      - fhevm-engine/coprocessor/Cargo.toml
-      - fhevm-engine/coprocessor/build.rs
-      - fhevm-engine/coprocessor/src/**
-      - fhevm-engine/executor/Cargo.toml
-      - fhevm-engine/executor/build.rs
-      - fhevm-engine/executor/src/**
-      - fhevm-engine/scheduler/src/**
-      - fhevm-engine/scheduler/Cargo.toml
-      - fhevm-engine/scheduler/build.rs
-      - proto/**
-      - '.github/workflows/gpu-tests.yml'
-      - ci/slab.toml
 
 jobs:
   should-run:
@@ -78,7 +50,7 @@ jobs:
               - fhevm-engine/scheduler/Cargo.toml
               - fhevm-engine/scheduler/build.rs
               - proto/**
-              - '.github/workflows/gpu-tests.yml'
+              - '.github/workflows/coprocessor_gpu-tests.yml'
               - ci/slab.toml
 
   setup-instance:

.github/workflows/docker-db-migration.yml renamed to .github/workflows/coprocessor_docker-build_db-migration.yml

@@ -2,15 +2,9 @@ name: "Docker - fhevm Host Contracts"
 
 on:
   pull_request:
-    paths:
-      - .github/workflows/docker-contracts.yml
-      - contracts/**
   push:
     branches:
       - main
-    paths:
-      - .github/workflows/docker-contracts.yml
-      - contracts/**
   release:
     types:
       - published
@@ -20,7 +14,26 @@ concurrency:
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
+  check-changes:
+    permissions:
+      actions: 'read'
+      contents: 'read'
+      pull-requests: 'read'
+    runs-on: ubuntu-latest
+    outputs:
+      changes-contracts-files: ${{ steps.filter.outputs.contracts-files }}
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # v3.0.2
+        id: filter
+        with:
+          filters: |
+            contracts-files:
+              - .github/workflows/host-contracts_docker-build.yml
+              - contracts/**
   docker-fhevm-contracts:
+    needs: check-changes
+    if: ${{ needs.check-changes.outputs.changes-contracts-files == 'true' || github.event_name == 'release' }}
     uses: zama-ai/ci-templates/.github/workflows/docker_common.yml@44333c96991d6747e0bef6a3308bfd98b20390f8 # main
     secrets:
       GHCR_ACTION_TOKEN: ${{ secrets.BLOCKCHAIN_ACTIONS_TOKEN }}

.github/workflows/gpu-tests.yml renamed to .github/workflows/coprocessor_gpu-tests.yml

@@ -2,18 +2,33 @@ name: fhevm Host Contracts Deployment Test
 
 on:
   pull_request:
-    paths:
-      - .github/workflows/fhevm-sc-tests.yml
-      - contracts/**
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
+  check-changes:
+    permissions:
+      actions: 'read'
+      contents: 'read'
+      pull-requests: 'read'
+    runs-on: ubuntu-latest
+    outputs:
+      changes-contracts-files: ${{ steps.filter.outputs.contracts-files }}
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # v3.0.2
+        id: filter
+        with:
+          filters: |
+            contracts-files:
+              - .github/workflows/host-contracts_docker-deployment-tests.yml
+              - contracts/**
   docker-compose-tests:
+    needs: check-changes
+    if: ${{ needs.check-changes.outputs.changes-contracts-files == 'true' }}
     runs-on: ubuntu-latest
-
     steps:
     - name: Checkout code
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

.github/workflows/docker-contracts.yml renamed to .github/workflows/host-contracts_docker-build.yml

@@ -2,13 +2,28 @@ name: Pull request tests (contracts)
 
 on:
   pull_request:
-    branches:
-      - "*"
-    paths:
-      - contracts/**
 
 jobs:
+  check-changes:
+    permissions:
+      actions: 'read'
+      contents: 'read'
+      pull-requests: 'read'
+    runs-on: ubuntu-latest
+    outputs:
+      changes-contracts-files: ${{ steps.filter.outputs.contracts-files }}
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # v3.0.2
+        id: filter
+        with:
+          filters: |
+            contracts-files:
+              - .github/workflows/host-contracts_npm-tests.yml
+              - contracts/**
   build:
+    needs: check-changes
+    if: ${{ needs.check-changes.outputs.changes-contracts-files == 'true' }}
     runs-on: large_ubuntu_32
     strategy:
       matrix:

.github/workflows/fhevm-host-contracts-tests.yml renamed to .github/workflows/host-contracts_docker-deployment-tests.yml

@@ -1,16 +1,30 @@
 name: Slither Analysis
-permissions:
-  contents: read
-  checks: write
+
 on:
   pull_request:
     branches:
       - main
-    paths:
-      - contracts/**
-      - .github/workflows/slither.yml
 jobs:
+  check-changes:
+    permissions:
+      actions: 'read'
+      contents: 'read'
+      pull-requests: 'read'
+    runs-on: ubuntu-latest
+    outputs:
+      changes-contracts-files: ${{ steps.filter.outputs.contracts-files }}
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36  # v3.0.2
+        id: filter
+        with:
+          filters: |
+            contracts-files:
+              - .github/workflows/host-contracts_slither-analysis.yml
+              - contracts/**
   analyze:
+    needs: check-changes
+    if: ${{ needs.check-changes.outputs.changes-contracts-files == 'true' }}
     runs-on: large_ubuntu_32
     steps:
       - name: Checkout
@@ -35,3 +49,7 @@ jobs:
         uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
         with:
           sarif_file: results.sarif
+
+permissions:
+  contents: read
+  checks: write