Merge pull request #2008 from carolynvs/skip-scan-for-docs

Skip security scan when a PR is only doc changes
getporter · Apr 6, 2022 · 39a5cbe · 39a5cbe
2 parents 00e7f8d + 44877fe
commit 39a5cbe
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/.github/workflows/security-scan.yaml b/.github/workflows/security-scan.yaml
@@ -1,5 +1,12 @@
 name: Security Scan
-on: [push,pull_request]
+on:
+  # always do a security scan when a change is merged
+  push: {}
+  # Only do a security scan on a PR when there are non-doc changes to save time
+  pull_request_target:
+    paths-ignore:
+      - 'docs/**'
+
 jobs:
   scan:
     runs-on: ubuntu-latest