Temporarily focus CI on process-root coverage

- Make non-coverage workflows manual-only while iterating on the native-symbol PR.
- Keep coverage active for push and pull_request but run only the process-root integration test.
- Preserve focused Python and C++ Codecov uploads for the container native-symbol regression.

Signed-off-by: Pramod Kumbhar <prkumbhar@nvidia.com>

Author: pramodk

.github/workflows/build_wheels.yml

@@ -3,14 +3,7 @@ name: Wheels
 permissions: {}
 
 on:
-  push:
-  pull_request:
-  release:
-    types:
-      - published
-  schedule:
-    # At 12:00 on every day-of-month
-    - cron: "0 12 */1 * *"
+  workflow_dispatch:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}

.github/workflows/coverage.yml

@@ -5,17 +5,10 @@ permissions:
 
 on:
   push:
-    branches:
-      - main
   pull_request:
     branches:
       - main
-  release:
-    types:
-      - published
-  schedule:
-    # At 12:00 on every day-of-month
-    - cron: "0 12 */1 * *"
+  workflow_dispatch:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
@@ -45,6 +38,7 @@ jobs:
             ninja-build \
             libdw-dev \
             libelf-dev \
+            util-linux \
             python3.10-dev \
             python3.10-dbg
       - name: Install Python dependencies
@@ -54,26 +48,26 @@ jobs:
       - name: Disable ptrace security restrictions
         run: |
           echo 0 | sudo tee /proc/sys/kernel/yama/ptrace_scope
-      - name: Require process-root native-symbol test support
+      - name: Prepare process-root native-symbol test support
         run: |
           sudo sysctl -w kernel.unprivileged_userns_clone=1 || true
           sudo sysctl -w user.max_user_namespaces=15000 || true
           sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 || true
           unshare --user --map-root-user --mount --propagation private true
-          PYSTACK_REQUIRE_PROCESS_ROOT_TEST=1 \
-            python3 -m pytest -vvv -s tests/integration/test_native_process_root.py
       - name: Compute Python coverage
         run: |
-          python3 -m pytest -vvv --log-cli-level=info -s --color=yes \
+          PYSTACK_REQUIRE_PROCESS_ROOT_TEST=1 \
+            python3 -m pytest -vvv --log-cli-level=info -s --color=yes \
                       --cov=pystack --cov=tests --cov-config=pyproject.toml --cov-report=term \
-                      --cov-append tests --cov-fail-under=85
+                      --cov-append tests/integration/test_native_process_root.py
           python3 -m coverage lcov -i -o pycoverage.lcov
           genhtml *coverage.lcov --branch-coverage --output-directory pystack-coverage
       - name: Compute C++ coverage
         run: |
           rm -rf build
           CFLAGS="-O0 -pg --coverage" CXXFLAGS="-O0 -pg --coverage" SKBUILD_BUILD_DIR=build pip install -e . --no-build-isolation
-          python3 -m pytest tests -v
+          PYSTACK_REQUIRE_PROCESS_ROOT_TEST=1 \
+            python3 -m pytest -vvv -s tests/integration/test_native_process_root.py
           find build -name "*.gcda" -o -name "*.gcno" | head -5
           lcov --capture --directory build --output-file cppcoverage.lcov
           lcov --extract cppcoverage.lcov '*/src/pystack/_pystack/*' --output-file cppcoverage.lcov

.github/workflows/docs.yml

@@ -3,9 +3,7 @@ name: Publish docs
 permissions: {}
 
 on:
-  push:
-    branches:
-      - main
+  workflow_dispatch:
 
 jobs:
   publish_docs:

.github/workflows/lint_and_docs.yml

@@ -2,7 +2,8 @@ name: Lint and docs
 
 permissions: {}
 
-on: [push, pull_request]
+on:
+  workflow_dispatch:
 
 jobs:
   lint_and_docs:

.github/workflows/news-check.yml

@@ -3,15 +3,7 @@ name: News entry check
 permissions: {}
 
 on:
-  pull_request:
-    paths:
-      - "src/**"
-    types:
-      - "opened"
-      - "reopened"
-      - "synchronize"
-      - "labeled"
-      - "unlabeled"
+  workflow_dispatch:
 
 jobs:
   news_entry_check:

.github/workflows/sanity-check.yml

@@ -3,13 +3,7 @@ name: Sanity check
 permissions: {}
 
 on:
-  pull_request:
-    types:
-      - "opened"
-      - "reopened"
-      - "synchronize"
-      - "labeled"
-      - "unlabeled"
+  workflow_dispatch:
 
 jobs:
   commits_check_job: