Merge pull request #9600 from dependabot/harry/#9562

Ignoring the fixture files in workflow (dependency review and code QL) runs

.github/workflows/codeql-analysis.yml

@@ -19,6 +19,7 @@ on:  # yamllint disable-line rule:truthy
     branches: [ main ]
     paths-ignore:
       - '*/spec/fixtures/**'
+      - '*/helpers/test/*/fixtures/**'
       - 'common/lib/dependabot.rb'
   schedule:
     - cron: '41 4 * * 3'

.github/workflows/dependency-review.yml

@@ -1,5 +1,11 @@
 name: Dependency Review
-on: [pull_request]  # yamllint disable-line rule:truthy
+on: # yamllint disable-line rule:truthy
+  pull_request:
+    branches: [ main ]
+    paths-ignore:
+      - '*/spec/fixtures/**'
+      - '*/helpers/test/*/fixtures/**'
+      - 'common/lib/dependabot.rb'
 
 permissions:
   contents: read