Analysis of Feb 17 data showed 400+ workflow runs/day consuming ~398 billable minutes (~200 hours/month projected). Implemented targeted optimizations: High-impact changes: - sec-audit.yml: add path filters (Cargo.toml, src/**, crates/**, deny.toml); skip docs-only PRs - test-benchmarks.yml: move from every-push-to-main to weekly schedule; retention 30d -> 7d - pub-docker-img.yml: tighten PR smoke build path filters to Docker-specific files only - sec-codeql.yml: reduce from twice-daily (14 runs/week) to weekly Medium-impact changes: - ci-run.yml: merge lint + lint-strict-delta into single job; drop --release from smoke build - feature-matrix.yml: remove push trigger (weekly-only); remove redundant cargo test step - dependabot.yml: monthly instead of weekly; reduce PR limits from 11 to 5/month; group all deps Runner cost savings: - Switch 6 lightweight API-only workflows to ubuntu-latest (PR Labeler, Intake, Auto Responder, Check Stale, Check Status, Sync Contributors) - pr-check-status.yml: reduce from every 12h to daily New files: - docs/ci-cost-optimization.md: comprehensive analysis and revised architecture documentation - scripts/ci/fetch_actions_data.py: reusable GitHub Actions cost analysis script Estimated impact: daily billable minutes ~400 -> ~120-150 (60-65%% reduction), monthly hours ~200 -> ~60-75, Dependabot PRs ~44/month -> ~5 (89%% reduction) |
||
|---|---|---|
| .. | ||
| scripts | ||
| ci-run.yml | ||
| feature-matrix.yml | ||
| main-branch-flow.md | ||
| pr-auto-response.yml | ||
| pr-check-stale.yml | ||
| pr-check-status.yml | ||
| pr-intake-checks.yml | ||
| pr-label-policy-check.yml | ||
| pr-labeler.yml | ||
| pub-docker-img.yml | ||
| pub-release.yml | ||
| README.md | ||
| sec-audit.yml | ||
| sec-codeql.yml | ||
| sync-contributors.yml | ||
| test-benchmarks.yml | ||
| test-e2e.yml | ||
| test-fuzz.yml | ||
| test-rust-build.yml | ||
| workflow-sanity.yml | ||
Workflow Directory Layout
GitHub Actions only loads workflow entry files from:
.github/workflows/*.yml.github/workflows/*.yaml
Subdirectories are not valid locations for workflow entry files.
Repository convention:
- Keep runnable workflow entry files at
.github/workflows/root. - Keep workflow-only helper scripts under
.github/workflows/scripts/. - Keep cross-tooling/local CI scripts under
scripts/ci/when they are used outside Actions.
Workflow behavior documentation in this directory:
.github/workflows/main-branch-flow.md
Current workflow helper scripts:
.github/workflows/scripts/ci_workflow_owner_approval.js.github/workflows/scripts/lint_feedback.js.github/workflows/scripts/pr_auto_response_contributor_tier.js.github/workflows/scripts/pr_auto_response_labeled_routes.js.github/workflows/scripts/pr_check_status_nudge.js.github/workflows/scripts/pr_intake_checks.js.github/workflows/scripts/pr_labeler.js.github/workflows/scripts/test_benchmarks_pr_comment.js