ci(codeql): guard analyze job against changed-scope failure

If changed-scope fails (runner error, OOM, etc.), all its outputs become
empty strings. The Check scope step won't match any case, so SHOULD_RUN
stays empty and all matrix entries silently skip — yet the job shows
green. Add an explicit failure guard so analyze correctly surfaces the
upstream failure.

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>
This commit is contained in:
Carlos Eduardo Arango Gutierrez 2026-03-13 16:18:58 +01:00
parent be05256c5a
commit 2a60953b4f
No known key found for this signature in database

View File

@ -96,7 +96,7 @@ jobs:
analyze:
name: Analyze (${{ matrix.language }})
needs: [docs-scope, changed-scope]
if: needs.docs-scope.outputs.docs_only != 'true'
if: needs.docs-scope.outputs.docs_only != 'true' && needs.changed-scope.result != 'failure'
runs-on: ${{ matrix.runs_on }}
strategy:
fail-fast: false