diff --git a/.github/workflows/sigma-test.yml b/.github/workflows/sigma-test.yml index 614977374f23..00958d67ff5e 100644 --- a/.github/workflows/sigma-test.yml +++ b/.github/workflows/sigma-test.yml @@ -8,6 +8,8 @@ on: # yamllint disable-line rule:truthy branches: - "*" paths: + - ".github/workflows/known-FPs.csv" + - ".github/workflows/sigma-test.yml" - "deprecated/**.yml" - "rules-compliance/**.yml" - "rules-dfir/**.yml" @@ -15,11 +17,16 @@ on: # yamllint disable-line rule:truthy - "rules-placeholder/**.yml" - "rules-threat-hunting/**.yml" - "rules/**.yml" + - "tests/test_logsource.py" + - "tests/test_rules.py" + - "tests/thor.yml" - "unsupported/**.yml" pull_request: branches: - master paths: + - ".github/workflows/known-FPs.csv" + - ".github/workflows/sigma-test.yml" - "deprecated/**.yml" - "rules-compliance/**.yml" - "rules-dfir/**.yml" @@ -27,6 +34,9 @@ on: # yamllint disable-line rule:truthy - "rules-placeholder/**.yml" - "rules-threat-hunting/**.yml" - "rules/**.yml" + - "tests/test_logsource.py" + - "tests/test_rules.py" + - "tests/thor.yml" - "unsupported/**.yml" # Allows you to run this workflow manually from the Actions tab