ci: separate workflow for cargo deny (save a queueing job) (#7541)

.github/workflows/ci.yml

@@ -153,28 +153,6 @@ jobs:
         with:
           files: .
 
-  deny:
-    name: Cargo Deny
-    runs-on: ubuntu-latest
-    steps:
-      - uses: taiki-e/checkout-action@v1
-
-      - uses: dorny/paths-filter@v3
-        id: filter
-        with:
-          filters: |
-            src:
-              - 'Cargo.lock'
-
-      - uses: Boshen/setup-rust@main
-        if: steps.filter.outputs.src == 'true'
-        with:
-          restore-cache: false
-          tools: cargo-deny
-
-      - if: steps.filter.outputs.src == 'true'
-        run: cargo deny check
-
   lint:
     name: Clippy
     runs-on: ubuntu-latest

.github/workflows/deny.yml

@@ -0,0 +1,31 @@
+name: Cargo Deny
+
+on:
+  workflow_dispatch:
+  pull_request:
+    types: [opened, synchronize]
+    paths:
+      - "Cargo.lock"
+  push:
+    branches:
+      - main
+    paths:
+      - "Cargo.lock"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: ${{ github.ref_name != 'main' }}
+
+jobs:
+  deny:
+    name: Cargo Deny
+    runs-on: ubuntu-latest
+    steps:
+      - uses: taiki-e/checkout-action@v1
+
+      - uses: Boshen/setup-rust@main
+        with:
+          restore-cache: false
+          tools: cargo-deny
+
+      - run: cargo deny check