[ngallodev]

Problem

GitHub-hosted CI, CodeQL builds, scheduled soak/fuzz, and test-impact publication are consuming the repository's monthly Actions minutes. Jenkins is already responsible for build, test, lint, security, and release-qualification gates.

Change

• Delete 8 automatic Actions workflows: PR CI matrix, cache warming, test-impact publication, Scorecard, issue labeling/label automation, PR acknowledgement, and stale issue maintenance.
• Remove automatic push, pull_request, and schedule triggers from 5 retained diagnostic/deployment workflows (CodeQL, fast repro, smoke, soak, Pages). These now run only by manual workflow_dispatch.
• Keep all reusable _*.yml workflows (including _test/_build/_security) for manually triggered release and diagnostics; retain existing manual release, qualification, Windows and dry-run tools.
• Add a standard-library Python policy guard and invoke it in Jenkins' first Lint stage to reject future automatic workflow triggers added during upstream merges.
• Document the Jenkins-only automatic CI policy in .github/CI_POLICY.md.

Deliberate behavior changes

• No automatic GitHub Actions build, lint, test, CodeQL or soak on PRs or pushes after merge.
• GitHub Pages requires manual deployment; its workflow is retained.
• Manual release workflows can still consume GitHub Actions minutes if explicitly started.
• Jenkins must be configured to pick up PRs and report qualification; this PR does not modify Jenkins server/webhook configuration.
• Existing running/queued Actions jobs are not automatically cancelled, and main retains existing triggers until merge.
• If upstream later merges additional workflows, the Jenkins policy guard must block automatic triggers.

Verification

• Inspect all retained .github/workflows/*.yml on: triggers (only workflow_dispatch or workflow_call allowed).
• Execute python3 scripts/ci/check-github-actions-policy.py in Jenkins.
• Confirm PR creation does not launch the old matrix after this PR merges; verify Jenkins still builds PRs.
• Check Settings → Branches/Rulesets for required GitHub-only status checks that should be replaced with Jenkins.
• This PR contains no CLI production code changes. No build or tests have been run here.

No automatic merge requested.

[coderabbitai]

Caution

Review failed

The pull request is closed.

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn