Abort CodeQL runs on new pushes to a pull-request's branch (#13241)

.github/workflows/ci.yml

@@ -3,10 +3,8 @@ name: Keycloak CI
 on:
   push:
     branches-ignore: [main]
-  pull_request:
-    paths-ignore:
-      - '.github/workflows/**'
-      - '!.github/workflows/ci.yml'
+  # as the ci.yml contains actions that are required for PRs to be merged, it will always need to run on all PRs
+  pull_request: {}
   schedule:
     - cron: '0 0 * * *'
 
@@ -15,7 +13,7 @@ env:
 
 concurrency:
   # Only run once for latest commit per ref and cancel other (previous) runs.
-  group: ci-keycloak-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:

.github/workflows/codeql-java-analysis.yml

@@ -17,7 +17,12 @@ on:
       - '.github/workflows/codeql-java-analysis.yml'
   schedule:
     - cron: '0 9 * * 2'
-    
+
+concurrency:
+  # Only run once for latest commit per ref and cancel other (previous) runs.
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   analyze:
     name: CodeQL analyze

.github/workflows/codeql-js-adapter-analysis.yml

@@ -17,7 +17,12 @@ on:
       - '.github/workflows/codeql-js-adapter-analysis.yml'
   schedule:
     - cron: '0 9 * * 2'
-    
+
+concurrency:
+  # Only run once for latest commit per ref and cancel other (previous) runs.
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   analyze:
     name: CodeQL analyze

.github/workflows/codeql-theme-analysis.yml

@@ -17,7 +17,12 @@ on:
       - '.github/workflows/codeql-theme-analysis.yml'
   schedule:
     - cron: '0 9 * * 2'
-    
+
+concurrency:
+  # Only run once for latest commit per ref and cancel other (previous) runs.
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   analyze:
     name: CodeQL analyze

.github/workflows/operator-ci.yml

@@ -17,7 +17,7 @@ env:
 
 concurrency:
   # Only run once for latest commit per ref and cancel other (previous) runs.
-  group: ci-operator-keycloak-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs: