[CI] Introduce guard job

.github/workflows/sdk-performance-metrics.yml

@@ -23,11 +23,11 @@ jobs:
   performance:
     name: Metrics
     runs-on: macos-15
+    if: github.event_name != 'pull_request' || (!contains(github.event.pull_request.title, 'skip-ci') && github.event.pull_request.draft == false)
     env:
       GITHUB_TOKEN: '${{ secrets.CI_BOT_GITHUB_TOKEN }}'
     steps:
       - name: Connect Bot
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.draft == false }}
         uses: webfactory/ssh-agent@v0.7.0
         with:
           ssh-private-key: ${{ secrets.BOT_SSH_PRIVATE_KEY }}
@@ -37,18 +37,15 @@ jobs:
           python-version: 3.12 # gsutil requires Python version 3.8-3.12
 
       - uses: actions/checkout@v3.1.0
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.draft == false }}
         with:
           fetch-depth: 0 # to fetch git tags
 
       - uses: ./.github/actions/bootstrap
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.draft == false }}
         env:
           GOOGLE_APPLICATION_CREDENTIALS: ${{ secrets.GOOGLE_APPLICATION_CREDENTIALS }}
           INSTALL_GCLOUD: true
 
       - name: Run XCMetrics
-        if: ${{ github.event_name != 'pull_request' || github.event.pull_request.draft == false }}
         run: bundle exec fastlane xcmetrics
         timeout-minutes: 120
         env:

.github/workflows/sdk-size-metrics.yml

@@ -20,6 +20,7 @@ jobs:
   sdk_size:
     name: Metrics
     runs-on: macos-15
+    if: github.event_name != 'pull_request' || (!contains(github.event.pull_request.title, 'skip-ci') && github.event.pull_request.draft == false)
     env:
       GITHUB_TOKEN: '${{ secrets.CI_BOT_GITHUB_TOKEN }}'
       GITHUB_PR_NUM: ${{ github.event.pull_request.number }}

.github/workflows/smoke-checks.yml

@@ -26,9 +26,29 @@ env:
   GITHUB_PR_NUM: ${{ github.event.pull_request.number }}
 
 jobs:
+  guard:
+    name: Guard
+    runs-on: ubuntu-latest
+    permissions:
+      actions: write
+      pull-requests: read
+    env:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: Check
+        run: |
+          if [ "${{ github.event_name }}" != "pull_request" ]; then
+            exit 0
+          fi
+          PR_TITLE=$(gh api "repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}" --jq .title)
+          if printf '%s' "$PR_TITLE" | grep -Fqi 'skip-ci'; then
+            gh run cancel "${{ github.run_id }}" --repo "${{ github.repository }}"
+          fi
+
   build-test-app-and-frameworks:
     name: Build Test App and Frameworks
     runs-on: macos-15
+    needs: guard
     steps:
     - uses: actions/checkout@v4.1.1
     - uses: ./.github/actions/ruby-cache
@@ -48,6 +68,7 @@ jobs:
   automated-code-review:
     name: Automated Code Review
     runs-on: macos-14
+    needs: guard
     env:
       XCODE_VERSION: "16.1"
     if: ${{ github.event.inputs.record_snapshots != 'true' }}
@@ -65,6 +86,7 @@ jobs:
     name: Build SDKs (Old Xcode)
     runs-on: macos-14
     if: ${{ github.event.inputs.record_snapshots != 'true' }}
+    needs: guard
     env:
       XCODE_VERSION: "16.1"
     steps:
@@ -87,6 +109,7 @@ jobs:
     name: Test LLC (Debug)
     runs-on: macos-15
     if: ${{ github.event.inputs.record_snapshots != 'true' }}
+    needs: guard
     steps:
     - uses: actions/checkout@v4.1.1
       with:
@@ -125,7 +148,9 @@ jobs:
   test-ui-debug:
     name: Test UI (Debug)
     runs-on: macos-15
-    needs: build-test-app-and-frameworks
+    needs:
+      - guard
+      - build-test-app-and-frameworks
     steps:
     - uses: actions/checkout@v4.1.1
     - uses: actions/download-artifact@v4
@@ -158,7 +183,9 @@ jobs:
   test-common-ui-debug:
     name: Test Common UI (Debug)
     runs-on: macos-15
-    needs: build-test-app-and-frameworks
+    needs:
+      - guard
+      - build-test-app-and-frameworks
     steps:
     - uses: actions/checkout@v4.1.1
     - uses: actions/download-artifact@v4
@@ -189,7 +216,9 @@ jobs:
     name: Launch Allure TestOps
     runs-on: macos-15
     if: ${{ github.event.inputs.record_snapshots != 'true' }}
-    needs: build-test-app-and-frameworks
+    needs:
+      - guard
+      - build-test-app-and-frameworks
     outputs:
       launch_id: ${{ steps.get_launch_id.outputs.launch_id }}
     steps:
@@ -209,6 +238,7 @@ jobs:
     runs-on: macos-15
     if: ${{ github.event.inputs.record_snapshots != 'true' }}
     needs:
+      - guard
       - allure_testops_launch
       - build-test-app-and-frameworks
     env:
@@ -262,8 +292,10 @@ jobs:
   build-apps:
     name: Build Demo App + Example Apps
     runs-on: macos-15
-    needs: build-test-app-and-frameworks
     if: ${{ github.event.inputs.record_snapshots != 'true' }}
+    needs:
+      - guard
+      - build-test-app-and-frameworks
     steps:
     - uses: actions/checkout@v4.1.1
     - uses: actions/download-artifact@v4
@@ -291,8 +323,10 @@ jobs:
   test-integration:
     name: Test Integration
     runs-on: macos-15
-    needs: build-test-app-and-frameworks
     if: ${{ github.event.inputs.record_snapshots != 'true' }}
+    needs:
+      - guard
+      - build-test-app-and-frameworks
     steps:
     - uses: actions/checkout@v4.1.1
     - uses: actions/download-artifact@v4