Make CI only run on PRs with the run-ci label

.github/dependabot.yml

@@ -8,5 +8,5 @@ updates:
   - package-ecosystem: "pip" # See documentation for possible values
     directory: "/" # Location of package manifests
     schedule:
-      interval: "daily"
+      interval: "weekly"
     open-pull-requests-limit: 10

.github/workflows/ci.yml

@@ -5,9 +5,20 @@ on:
     branches: [ "main" ]
   pull_request:
     branches: [ "main" ]
+    types: [opened, labeled]
 
 jobs:
   pyTest:
+    if: |
+      github.event_name == 'push' ||
+      (
+        github.event_name == 'pull_request' &&
+        (
+          contains(github.event.pull_request.title, '[run ci]') ||
+          contains(github.event.pull_request.body, '[run ci]') ||
+          contains(join(github.event.pull_request.labels.*.name), 'run-ci')
+        )
+      )
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
@@ -31,6 +42,16 @@ jobs:
         python3.11 -m pytest tests/ -p no:warnings
 
   black:
+    if: |
+      github.event_name == 'push' ||
+      (
+        github.event_name == 'pull_request' &&
+        (
+          contains(github.event.pull_request.title, '[run ci]') ||
+          contains(github.event.pull_request.body, '[run ci]') ||
+          contains(join(github.event.pull_request.labels.*.name), 'run-ci')
+        )
+      )
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
@@ -48,6 +69,16 @@ jobs:
         black $(git rev-parse --show-toplevel) --check
 
   pyLint:
+    if: |
+      github.event_name == 'push' ||
+      (
+        github.event_name == 'pull_request' &&
+        (
+          contains(github.event.pull_request.title, '[run ci]') ||
+          contains(github.event.pull_request.body, '[run ci]') ||
+          contains(join(github.event.pull_request.labels.*.name), 'run-ci')
+        )
+      )
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
@@ -65,6 +96,16 @@ jobs:
         pylint $(git ls-files '*.py')
 
   lineEndingCheck:
+    if: |
+      github.event_name == 'push' ||
+      (
+        github.event_name == 'pull_request' &&
+        (
+          contains(github.event.pull_request.title, '[run ci]') ||
+          contains(github.event.pull_request.body, '[run ci]') ||
+          contains(join(github.event.pull_request.labels.*.name), 'run-ci')
+        )
+      )
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
@@ -81,6 +122,16 @@ jobs:
         fi
 
   flake8:
+    if: |
+      github.event_name == 'push' ||
+      (
+        github.event_name == 'pull_request' &&
+        (
+          contains(github.event.pull_request.title, '[run ci]') ||
+          contains(github.event.pull_request.body, '[run ci]') ||
+          contains(join(github.event.pull_request.labels.*.name), 'run-ci')
+        )
+      )
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
@@ -98,6 +149,16 @@ jobs:
         flake8 $(git rev-parse --show-toplevel)
 
   isort:
+    if: |
+      github.event_name == 'push' ||
+      (
+        github.event_name == 'pull_request' &&
+        (
+          contains(github.event.pull_request.title, '[run ci]') ||
+          contains(github.event.pull_request.body, '[run ci]') ||
+          contains(join(github.event.pull_request.labels.*.name), 'run-ci')
+        )
+      )
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
@@ -115,6 +176,16 @@ jobs:
         isort --check-only $(git rev-parse --show-toplevel)/ --profile black
 
   containerBuild:
+    if: |
+      github.event_name == 'push' ||
+      (
+        github.event_name == 'pull_request' &&
+        (
+          contains(github.event.pull_request.title, '[run ci]') ||
+          contains(github.event.pull_request.body, '[run ci]') ||
+          contains(join(github.event.pull_request.labels.*.name), 'run-ci')
+        )
+      )
     runs-on: ubuntu-latest
     needs: 
       - pyTest

.github/workflows/codeql.yml

@@ -15,13 +15,21 @@ on:
   push:
     branches: [ "main" ]
   pull_request:
-    # The branches below must be a subset of the branches above
     branches: [ "main" ]
+    types: [opened, labeled]
   schedule:
     - cron: '31 18 * * 1'
 
 jobs:
   analyze:
+    if: |
+        github.event_name == 'push' ||
+        (
+          github.event_name == 'pull_request' &&
+          (
+            contains(join(github.event.pull_request.labels.*.name), 'run-ci')
+          )
+        )
     name: Analyze
     runs-on: ubuntu-latest
     permissions: