CI: move devel-push jobs onto a nightly 2:00 PM Pacific schedule (#5647)

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Co-authored-by: michael.d.starch <michael.d.starch@jpl.nasa.gov>

Author: 3 people

.github/workflows/build-test-rhel8.yml

@@ -5,8 +5,10 @@ name: CI [RHEL8]
 # Controls when the action will run. Triggers the workflow on push or pull request
 # events but only for the master branch
 on:
+  schedule:
+    - cron: "0 21 * * *"  # Nightly at 2:00 PM US/Pacific (PDT)
   push:
-    branches: [ devel, release/** ]
+    branches: [ release/** ]
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [ devel, release/** ]

.github/workflows/cmake-test.yml

@@ -3,8 +3,10 @@ name: CMake Test
 # Controls when the action will run. Triggers the workflow on push or pull request
 # events but only for the master branch
 on:
+  schedule:
+    - cron: "0 21 * * *"  # Nightly at 2:00 PM US/Pacific (PDT)
   push:
-    branches: [ devel, release/** ]
+    branches: [ release/** ]
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [ devel, release/** ]

.github/workflows/codeql-jpl-standard.yml

@@ -4,8 +4,10 @@
 name: "Code Scan: JPL Coding Standard"
 
 on:
+  schedule:
+    - cron: "0 21 * * *"  # Nightly at 2:00 PM US/Pacific (PDT)
   push:
-    branches: [ devel, release/** ]
+    branches: [ release/** ]
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [ devel, release/** ]
@@ -97,7 +99,7 @@ jobs:
     # regressions are caught, but results are not uploaded, preventing stale
     # branches from accumulating alerts.
     - name: Upload SARIF
-      if: github.event_name == 'push' && github.ref == 'refs/heads/devel'
+      if: (github.event_name == 'push' || github.event_name == 'schedule') && github.ref == 'refs/heads/devel'
       uses: github/codeql-action/upload-sarif@v3
       with:
         sarif_file: sarif-results/cpp.sarif
@@ -107,12 +109,12 @@ jobs:
     # writes cpp.sarif, so rename to the config name for a unique file when
     # the artifacts are merged.
     - name: Rename SARIF for publishing
-      if: github.event_name == 'push'
+      if: github.event_name == 'push' || github.event_name == 'schedule'
       env:
         CONFIG_FILE: ${{ matrix.config-file }}
       run: cp sarif-results/cpp.sarif "sarif-results/${CONFIG_FILE%.yml}.sarif"
     - name: Upload SARIF artifact for publishing
-      if: github.event_name == 'push'
+      if: github.event_name == 'push' || github.event_name == 'schedule'
       uses: actions/upload-artifact@v4
       with:
         name: codeql-jpl-sarif-${{ matrix.config-file }}
@@ -128,7 +130,7 @@ jobs:
   publish-findings:
     name: Publish per-module findings
     needs: analyze
-    if: github.event_name == 'push'
+    if: github.event_name == 'push' || github.event_name == 'schedule'
     runs-on: ubuntu-22.04
     permissions:
       contents: write

.github/workflows/codeql-query-tests.yml

@@ -6,8 +6,10 @@
 name: "Code Scan: JPL Coding Standard Query Tests"
 
 on:
+  schedule:
+    - cron: "0 21 * * *"  # Nightly at 2:00 PM US/Pacific (PDT)
   push:
-    branches: [ devel, release/** ]
+    branches: [ release/** ]
     paths:
       - '.github/codeql/**'
       - '.github/workflows/codeql-query-tests.yml'

.github/workflows/codeql-security-scan.yml

@@ -4,8 +4,10 @@
 name: "Code Scan: CodeQL Security"
 
 on:
+  schedule:
+    - cron: "0 21 * * *"  # Nightly at 2:00 PM US/Pacific (PDT)
   push:
-    branches: [ devel, release/** ]
+    branches: [ release/** ]
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [ devel, release/** ]
@@ -88,7 +90,7 @@ jobs:
     # regressions are caught, but results are not uploaded, preventing stale
     # branches from accumulating alerts.
     - name: Upload SARIF
-      if: github.event_name == 'push' && github.ref == 'refs/heads/devel'
+      if: (github.event_name == 'push' || github.event_name == 'schedule') && github.ref == 'refs/heads/devel'
       uses: github/codeql-action/upload-sarif@v3
       with:
         sarif_file: sarif-results/${{ matrix.language }}.sarif
@@ -97,7 +99,7 @@ jobs:
     # Hand the filtered SARIF to the publish-findings job so per-module
     # findings can be published without re-running CodeQL.
     - name: Upload SARIF artifact for publishing
-      if: github.event_name == 'push'
+      if: github.event_name == 'push' || github.event_name == 'schedule'
       uses: actions/upload-artifact@v4
       with:
         name: codeql-sarif-${{ matrix.language }}
@@ -112,7 +114,7 @@ jobs:
   publish-findings:
     name: Publish per-module findings
     needs: analyze
-    if: github.event_name == 'push'
+    if: github.event_name == 'push' || github.event_name == 'schedule'
     runs-on: ubuntu-22.04
     permissions:
       contents: write

.github/workflows/component-checks.yml

@@ -13,8 +13,10 @@
 name: "Component Checks"
 
 on:
+  schedule:
+    - cron: "0 21 * * *"  # Nightly at 2:00 PM US/Pacific (PDT)
   push:
-    branches: [ devel, release/** ]
+    branches: [ release/** ]
     tags:     [ 'v*' ]
   workflow_dispatch:
 

.github/workflows/config-test.yml

@@ -5,8 +5,10 @@
 name: "Config Test"
 
 on:
+  schedule:
+    - cron: "0 21 * * *"  # Nightly at 2:00 PM US/Pacific (PDT)
   push:
-    branches: [ devel, release/** ]
+    branches: [ release/** ]
   pull_request:
     branches: [ devel, release/** ]
     paths-ignore:

.github/workflows/coverage-update.yml

@@ -17,8 +17,10 @@
 name: "Coverage Update"
 
 on:
+  schedule:
+    - cron: "0 21 * * *"  # Nightly at 2:00 PM US/Pacific (PDT)
   push:
-    branches: [ devel, release/** ]
+    branches: [ release/** ]
     tags:     [ 'v*' ]
   workflow_dispatch:
 

.github/workflows/cppcheck-scan.yml

@@ -2,8 +2,10 @@
 name: "Code Scan: CppCheck"
 
 on:
+  schedule:
+    - cron: "0 21 * * *"  # Nightly at 2:00 PM US/Pacific (PDT)
   push:
-    branches: [ devel, release/** ]
+    branches: [ release/** ]
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [ devel, release/** ]

.github/workflows/ext-aarch64-linux-led-blinker.yml

@@ -4,8 +4,10 @@
 name: "External Repo: AArch64 Linux LedBlinker"
 
 on:
+  schedule:
+    - cron: "0 21 * * *"  # Nightly at 2:00 PM US/Pacific (PDT)
   push:
-    branches: [devel, release/**]
+    branches: [release/**]
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [devel, release/**]