attempt to limit runs when MR is open

.github/workflows/codeql.yml

@@ -17,6 +17,7 @@ on:
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [ "main" ]
+    types: [opened, reopened]
   schedule:
     - cron: '44 21 * * 0'
 

.github/workflows/docs.yml

@@ -2,6 +2,7 @@ name: Documentation
 on:
   push:
   pull_request:
+    types: [opened, reopened]
   pull_request_target:
 
 jobs:

.github/workflows/mypy.yml

@@ -2,6 +2,7 @@ name: type checking
 on:
   push:
   pull_request:
+    types: [opened, reopened]
   pull_request_target:
 
 jobs:

.github/workflows/quality.yml

@@ -2,6 +2,7 @@ name: Code quality
 on:
   push:
   pull_request:
+    types: [opened, reopened]
   pull_request_target:
 
 jobs:

.github/workflows/tests.yml

@@ -2,6 +2,7 @@ name: Tests
 on:
   push:
   pull_request:
+    types: [opened, reopened]
   pull_request_target:
 
 jobs:

ca/django_ca/key_backends/storages.py

@@ -85,13 +85,13 @@ class UsePrivateKeyOptions(pydantic.BaseModel):
     @classmethod
     def load_default_password(cls, password: Optional[bytes], info: ValidationInfo) -> Optional[bytes]:
         """Validator to load the password from CA_PASSWORDS if not given."""
-        if info.context is not None and password is None:
+        if info.context and password is None:
             ca: CertificateAuthority = info.context.get("ca")
             if ca:
                 settings_password = ca_settings.CA_PASSWORDS.get(ca.serial)
                 if isinstance(settings_password, str):
                     return settings_password.encode()
-                elif isinstance(settings_password, bytes):
+                if isinstance(settings_password, bytes):
                     return settings_password
 
         return password