ci: small improvements workflows (hiero-ledger#2075)

exploreriii · AntonioCeppellini · commit 3f2036d8d562 · 2026-04-22T22:52:41.000+02:00
Signed-off-by: exploreriii &lt;133720349+exploreriii@users.noreply.github.com&gt;
diff --git a/.github/workflows/pr-check-feedback-all.yml b/.github/workflows/pr-check-feedback-all.yml
@@ -3,10 +3,13 @@ on:
   workflow_dispatch:
   workflow_run:
     workflows:
-      - "PR Formatting"
-      - "PR Changelog Check"
-      - "Hiero Solo Integration & Unit Tests"
-      - "Run Examples"
+      - "Primary PR Check – Broken Markdown Links"
+      - "Primary PR Check - Code-coverage"
+      - "Primary PR Check - Test Files Naming"
+      - "Secondary PR Check - Examples"
+      - "Secondary PR Check - TCK Unit Test"
+      - "Secondary PR Check - Hiero Solo Integration & Unit Tests"
+      - "Secondary PR Check - Dependency Compatibility"
     types:
       - completed
 permissions:
@@ -46,6 +49,7 @@ jobs:
         run: |
           REPO="${{ github.repository }}"
           COMMENT=$(cat <<EOF
+          <!-- workflow-failure-bot -->
           Hi, this is WorkflowBot. 
           Your pull request cannot be merged as it is not passing all our workflow checks. 
           Please click on each check to review the logs and resolve issues so all checks pass.
@@ -61,7 +65,7 @@ jobs:
           EOF
           )
           EXISTING_COMMENT=$(gh pr view "$PR_NUMBER" --repo "$REPO" --comments \
-            --json comments --jq ".comments[] | select(.body == \"${COMMENT//\"/\\\"}\") | .id")
+            --json comments --jq '.comments[] | select(.body | contains("<!-- workflow-failure-bot -->")) | .id')
 
           if [ -z "$EXISTING_COMMENT" ]; then
             gh pr comment "$PR_NUMBER" --repo "$REPO" --body "$COMMENT"
diff --git a/.github/workflows/pr-check-primary-broken-links.yml b/.github/workflows/pr-check-primary-broken-links.yml
@@ -1,16 +1,24 @@
-name: PR Check – Broken Markdown Links
+name: Primary PR Check – Broken Markdown Links
 
 on:
+  push:
+    branches: [main]
+    paths:
+      - "**/*.md"
   pull_request:
     paths:
       - "**/*.md"
 
 permissions:
   contents: read
 
+concurrency:
+  group: pr-markdown-links-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
 jobs:
   pr-check-broken-links:
-    runs-on: hl-sdk-py-lin-md
+    runs-on: ${{ (github.event.pull_request.head.repo.full_name == github.repository && github.repository_owner == 'hiero-ledger') && 'hl-sdk-py-lin-md' || 'ubuntu-latest' }}
 
     steps:
       - name: Harden runner (audit outbound calls)
diff --git a/.github/workflows/pr-check-primary-codecov.yml b/.github/workflows/pr-check-primary-codecov.yml
@@ -1,9 +1,15 @@
-name: Code Coverage
+name: Primary PR Check - Code-coverage
 
 on:
   push:
     branches: [main]
+    paths:
+      - "src/**"
+      - "tests/unit/**"
   pull_request:
+    paths:
+      - "src/**"
+      - "tests/unit/**"
 
 permissions:
   contents: read
diff --git a/.github/workflows/pr-check-primary-test-files.yml b/.github/workflows/pr-check-primary-test-files.yml
@@ -1,9 +1,15 @@
-name: Test Files Naming Check
+# This workflow checks that all test files in the repository follow the naming convention of ending with "_test.py".
+name: Primary PR Check - Test Files Naming
 
 on:
   push:
-    branches-ignore:
-      - main
+    branches: [main]
+    paths:
+      - "tests/**"
+  pull_request:
+    types: [opened, synchronize, review_requested, ready_for_review, reopened]
+    paths:
+      - "tests/**"
 
 permissions:
   contents: read
diff --git a/.github/workflows/pr-check-secondary-deps-test.yml b/.github/workflows/pr-check-secondary-deps-test.yml
@@ -1,4 +1,4 @@
-name: Dependency Compatibility Check
+name: Secondary PR Check - Dependency Compatibility
 
 on:
   push:
@@ -26,7 +26,7 @@ jobs:
         uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
         with:
           egress-policy: audit
-      
+
       - name: Checkout repository
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
diff --git a/.github/workflows/pr-check-secondary-examples.yml b/.github/workflows/pr-check-secondary-examples.yml
@@ -1,10 +1,10 @@
-name: Run Examples
+name: Secondary PR Check - Examples
 permissions:
   contents: read
 
 on:
   push:
-    branches: 
+    branches:
       - "**"
   pull_request:
   workflow_dispatch:
@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           fetch-depth: 0
-          
+
       - name: Install uv
         uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
 
diff --git a/.github/workflows/pr-check-secondary-tck-test.yml b/.github/workflows/pr-check-secondary-tck-test.yml
@@ -1,33 +1,38 @@
-name: TCK Unit Test
+name: Secondary PR Check - TCK Unit Test
 
 on:
   push:
     branches:
       - "main"
     paths:
+      - "src/**"
       - "tck/**"
       - "tests/tck/**"
   pull_request:
     paths:
+      - "src/**"
       - "tck/**"
       - "tests/tck/**"
   workflow_dispatch: {}
 
 permissions:
   contents: read
 
+concurrency:
+  group: tck-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
 
 jobs:
   tck-unit-test:
-    name: Tck Unit Test
+    name: TCK Unit Test
     runs-on: hl-sdk-py-lin-md
 
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
         with:
           egress-policy: audit
-      
+
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
@@ -46,7 +51,7 @@ jobs:
 
       - name: Generate Proto Files
         run: uv run generate_proto.py
-      
+
       - name: Run unit tests
         run: |
           uv run pytest tests/tck -v
