diff --git a/.github/workflows/kernel-security-analysis-pr.yml b/.github/workflows/kernel-security-analysis-pr.yml index fea7afc375..134e02dfc1 100644 --- a/.github/workflows/kernel-security-analysis-pr.yml +++ b/.github/workflows/kernel-security-analysis-pr.yml @@ -42,5 +42,7 @@ jobs: - name: Check kernel config for security issues run: | for file in ${{ steps.changed-files.outputs.all_changed_files }}; do - kconfig-hardened-check/bin/kconfig-hardened-check -m show_fail -c $file | sed -e 's/^/ /' >> $GITHUB_STEP_SUMMARY + if [[ "${file}" = config/kernel/*.config ]]; then + kconfig-hardened-check/bin/kconfig-hardened-check -m show_fail -c $file | sed -e 's/^/ /' >> $GITHUB_STEP_SUMMARY + fi done