Make CI action bumps easier to validate (DataDog#23890)

* Run release-hash-check on its own workflow changes

Add the workflow file to the pull_request paths filter so action-version
bumps (e.g. Renovate updates to tj-actions/changed-files) are exercised on
the PR that introduces them. Guard the hash-check script on any_changed so a
workflow-only change still runs the action but doesn't fail with no link file
to validate.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* Remove redundant comments

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* Add dry-run mode to skip the test-results badge commit

Add a dry_run input to test-results-master.yml that runs the badge step but
skips committing to the badges branch, and expose it as a workflow_dispatch
input on flaky-tests.yml. This lets action bumps (e.g. Renovate updates to
emibcn/badge-action) be validated on demand without moving the public badge.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* Trim dry_run input descriptions

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* chore(ci): run flaky-tests workflow on test-results-master.yml changes

- Add pull_request trigger scoped to .github/workflows/test-results-master.yml
- Auto-enable dry_run when triggered by pull request to avoid committing during validation

Rationale: Allows self-validation of the workflow when test-results-master.yml is modified, mirroring the pattern already used for release-hash-check

This commit made by [/dd:git:commit:quick](https://github.com/DataDog/claude-marketplace/tree/main/dd/commands/git/commit/quick.md)

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: lucia-sb

.github/workflows/flaky-tests.yml

@@ -1,7 +1,16 @@
 name: Daily Flaky Tests (every 8 hours)
 
 on:
+  pull_request:
+    paths:
+    - .github/workflows/test-results-master.yml
   workflow_dispatch:
+    inputs:
+      dry_run:
+        description: "Skip committing the test-results badge."
+        required: false
+        default: false
+        type: boolean
   schedule:
   # 4 AM, 12 PM, 8 PM UTC
   - cron: "0 4,12,20 * * *"
@@ -46,4 +55,6 @@ jobs:
       pull-requests: write # Needed for test-results-master
 
     uses: ./.github/workflows/test-results-master.yml
+    with:
+      dry_run: ${{ github.event_name == 'pull_request' || inputs.dry_run || false }}
     secrets: inherit

.github/workflows/release-hash-check.yml

@@ -7,6 +7,7 @@ on:
       - '7.[0-9]+.x'
     paths:
       - .in-toto/*.link
+      - .github/workflows/release-hash-check.yml
 
 jobs:
   build:
@@ -29,4 +30,5 @@ jobs:
       with:
         files: .in-toto/*.link
 
-    - run: python .github/workflows/release-hash-check.py ${{ steps.changed-files.outputs.all_changed_files }}
+    - if: steps.changed-files.outputs.any_changed == 'true'
+      run: python .github/workflows/release-hash-check.py ${{ steps.changed-files.outputs.all_changed_files }}

.github/workflows/test-results-master.yml

@@ -2,6 +2,12 @@ name: Test results for the master branch
 
 on:
   workflow_call:
+    inputs:
+      dry_run:
+        description: "Run the badge step but skip committing to the badges branch."
+        required: false
+        default: false
+        type: boolean
 
 defaults:
   run:
@@ -66,6 +72,7 @@ jobs:
         git config --local user.email "github-actions[bot]@users.noreply.github.com"
 
     - name: Commit if stats have changed
+      if: ${{ !inputs.dry_run }}
       run: |-
         git add "${{ env.BADGE_PATH }}"
         if git commit -m "Update test results from ${{ github.sha }}"; then