[CI] CodeQL optimization (#28866) (#28887)

* Ignore JS tests when doing CodeQL scans

* Do not run CodeQL scans unless needed

Co-authored-by: Nemanja Glumac <31325167+nemanjaglumac@users.noreply.github.com>

.github/codeql/codeql-config.yml

+name: "Metabase CodeQL config"
+
+paths-ignore:
+  - "**/node_modules"
+  - "frontend/test/**"
+  - "frontend/**/*.unit.*"
+  - "e2e/**"

.github/file-paths.yaml

@@ -91,3 +91,7 @@ documentation:
 yaml:
   - "**/*.yml"
   - "**/*.yaml"
+
+codeql:
+  - "frontend/src/**"
+  - "enterprise/frontend/src/**"

.github/workflows/codeql.yml

@@ -8,7 +8,22 @@ on:
   pull_request:
 
 jobs:
+  files-changed:
+    name: Check which files changed
+    runs-on: ubuntu-22.04
+    timeout-minutes: 3
+    outputs:
+      codeql: ${{ steps.changes.outputs.codeql }}
+    steps:
+      - uses: actions/checkout@v3
+      - name: Test which files changed
+        uses: dorny/paths-filter@v2.11.1
+        id: changes
+        with:
+          token: ${{ github.token }}
+          filters: .github/file-paths.yaml
   analyze:
+    needs: files-changed
     runs-on: ubuntu-22.04
     steps:
     - name: Checkout repository
@@ -17,5 +32,6 @@ jobs:
       uses: github/codeql-action/init@v2
       with:
         languages: javascript
+        config-file: ./.github/codeql/codeql-config.yml
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v2