From d1dbf2f0e65c653f48769be5293c2d706566ccb3 Mon Sep 17 00:00:00 2001
From: Yuhang Cao <caoyuhang@fwerkor.com>
Date: Sun, 12 Jul 2026 11:18:56 +0000
Subject: [PATCH] ci: make real boot triggers future-proof

---
 .github/workflows/os-real-boot.yml | 66 ++++++++++++++++++------------
 1 file changed, 40 insertions(+), 26 deletions(-)

diff --git a/.github/workflows/os-real-boot.yml b/.github/workflows/os-real-boot.yml
index 7d0fb83575..bca8fbb545 100644
--- a/.github/workflows/os-real-boot.yml
+++ b/.github/workflows/os-real-boot.yml
@@ -3,34 +3,48 @@ name: OS Real Boot Check
 on:
   pull_request:
     branches: ["main"]
-    paths:
-      - ".config"
-      - ".github/workflows/os-real-boot.yml"
-      - "config/**"
-      - "feeds.conf*"
-      - "include/**"
-      - "package/capos/**"
-      - "package/utils/argosfs/**"
-      - "scripts/ci/**"
-      - "target/linux/generic/**"
-      - "target/linux/x86/**"
-      - "target/linux/armsr/**"
-      - "toolchain/**"
+    # Default to running for repository changes so new build inputs and
+    # vendored feeds cannot silently bypass the real image build. Ignore only
+    # files that cannot affect the produced CapOS images.
+    paths-ignore:
+      - ".devcontainer/**"
+      - ".github/FUNDING.yml"
+      - ".github/ISSUE_TEMPLATE/**"
+      - ".github/labeler.yml"
+      - ".github/pull_request_template"
+      - ".github/workflows/greetings.yml"
+      - ".github/workflows/issue-summary.yml"
+      - ".github/workflows/labeler.yml"
+      - ".github/workflows/os-sanity.yml"
+      - ".github/workflows/stale.yml"
+      - "CODE_OF_CONDUCT.md"
+      - "CONTRIBUTING.md"
+      - "README.md"
+      - "SECURITY.md"
+      - "TODO.md"
+      - "website/**"
   push:
     branches: ["main"]
-    paths:
-      - ".config"
-      - ".github/workflows/os-real-boot.yml"
-      - "config/**"
-      - "feeds.conf*"
-      - "include/**"
-      - "package/capos/**"
-      - "package/utils/argosfs/**"
-      - "scripts/ci/**"
-      - "target/linux/generic/**"
-      - "target/linux/x86/**"
-      - "target/linux/armsr/**"
-      - "toolchain/**"
+    # Default to running for repository changes so new build inputs and
+    # vendored feeds cannot silently bypass the real image build. Ignore only
+    # files that cannot affect the produced CapOS images.
+    paths-ignore:
+      - ".devcontainer/**"
+      - ".github/FUNDING.yml"
+      - ".github/ISSUE_TEMPLATE/**"
+      - ".github/labeler.yml"
+      - ".github/pull_request_template"
+      - ".github/workflows/greetings.yml"
+      - ".github/workflows/issue-summary.yml"
+      - ".github/workflows/labeler.yml"
+      - ".github/workflows/os-sanity.yml"
+      - ".github/workflows/stale.yml"
+      - "CODE_OF_CONDUCT.md"
+      - "CONTRIBUTING.md"
+      - "README.md"
+      - "SECURITY.md"
+      - "TODO.md"
+      - "website/**"
   workflow_dispatch:
 
 permissions: