@@ -140,6 +140,29 @@ jobs:
         if: ${{ matrix.name == 'content-linter' }}
         run: echo "${{ steps.changed_files.outputs.all_modified_files }}" > get_diff_files.txt
 
+      - name: Check for automated pipeline changes
+        if: ${{ matrix.name == 'automated-pipelines' && github.event_name == 'pull_request' }}
+        id: pipeline_files
+        uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5
+        with:
+          # Count a rename as a delete plus an add, so moving a file out of these paths still matches.
+          output_renamed_files_as_deleted_and_added: true
+          # Generated content counts too, so sync PRs render every page.
+          files: |
+            .github/workflows/test.yml
+            package-lock.json
+            content/code-security/reference/code-scanning/codeql/codeql-cli-manual/**
+            content/graphql/**
+            content/rest/**
+            src/audit-logs/**
+            src/automated-pipelines/**
+            src/codeql-cli/**
+            src/github-apps/**
+            src/graphql/**
+            src/rest/**
+            src/secret-scanning/**
+            src/webhooks/**
+
       - uses: ./.github/actions/cache-nextjs
         if: ${{ env.START_VITEST_SERVER != 'false' }}
 
@@ -172,4 +195,6 @@ jobs:
           # RUNNER_DEBUG enables timing and path logs when Actions reruns jobs with debug logging.
           RUNNER_DEBUG: ${{ runner.debug }}
           VITEST_FLAGS: ${{ matrix.name == 'article-api' && '--no-file-parallelism --maxWorkers=1' || '' }}
+          # PRs render pinned autogenerated pages unless they change pipeline code or output.
+          AUTOGENERATED_RENDER_ALL: ${{ matrix.name == 'automated-pipelines' && (github.event_name != 'pull_request' || steps.pipeline_files.outputs.any_modified == 'true') }}
         run: npm test -- $VITEST_FLAGS src/${{ matrix.name }}/tests/
@@ -44,7 +44,7 @@ When creating a new pipeline, the source data that is being consumed may not hav
 - Each pipeline typically requires a workflow to allow scheduling or manually running the pipeline. The workflow should be placed in the `.github/workflows` directory and named `sync-<pipeline-name>.ts`. Each workflow typically requires adding a manual run option and an input parameter to specify the source repo's branch to use.
 - Each pipeline will need a `scripts` directory with (at minimum) a `scripts/sync.ts` file to run the pipeline.
 - If the pipeline will contain structured data, you will need to add a `src/<pipeline-name>/data` directory. The files inside the `data` directory are typically organized by version (e.g., `src/webhooks/data/fpt/*`).
-- Pipelines typically have tests specific to the pipeline that are placed in the `src/<pipeline-name>/tests` directory. There is no need to add tests that render the page because all autogenerated pages are tested in `src/automated-pipelines/tests/rendering.ts`.
+- Pipelines typically have tests specific to the pipeline that are placed in the `src/<pipeline-name>/tests` directory. There is no need to add tests that render the page because all autogenerated pages are tested in `src/automated-pipelines/tests/rendering.ts`. Add the new `src/<pipeline-name>/**` path to the "Check for automated pipeline changes" step in `.github/workflows/test.yml` so PRs that change the pipeline render every page.
   - If the pipeline uses a Next.js page component (e.g., `pages/**/*.tsx`), ensure there is a test that fails if that page component is moved or deleted.
 
 ## How to get help
@@ -175,6 +175,12 @@ All autogenerated pages tested in `src/automated-pipelines/tests/rendering.ts`:
 - Links are valid
 - Schema validation
 
+The merge queue and PRs that change pipeline code or generated REST, GraphQL, or CodeQL CLI content render every autogenerated page. Other PRs and local runs render the pages in `PINNED_PAGES` in `src/automated-pipelines/tests/rendering.ts`, and every page for generators not listed there. To render every page locally, run:
+
+```bash
+AUTOGENERATED_RENDER_ALL=true npm test -- src/automated-pipelines/tests/rendering.ts
+```
+
 ### Pipeline-specific tests
 
 Each pipeline in `src/<pipeline-name>/tests/` should test:
 
@@ -9,6 +9,7 @@ import { get } from '@/tests/helpers/e2etest'
 type Page = {
   autogenerated?: string
   fullPath: string
+  relativePath: string
   permalinks: Array<{ href: string }>
   versions: {
     feature?: string | string[]
@@ -18,16 +19,61 @@ type Page = {
 
 const pageList: Page[] = await loadPages(undefined, ['en'])
 
+// CI sets AUTOGENERATED_RENDER_ALL in the merge queue and on PRs that change pipeline code or output.
+// Otherwise, render a fixed set of pages per generator to keep local runs and PRs fast.
+const RENDER_ALL = process.env.AUTOGENERATED_RENDER_ALL === 'true'
+
+// Paths are relative to content/. Generators not listed here render every page.
+// Pick pages that use the generator's main page layout, not index pages.
+const PINNED_PAGES: Record<string, string[]> = {
+  'codeql-cli': [
+    'code-security/reference/code-scanning/codeql/codeql-cli-manual/database-analyze.md',
+    'code-security/reference/code-scanning/codeql/codeql-cli-manual/database-create.md',
+    'code-security/reference/code-scanning/codeql/codeql-cli-manual/github-merge-results.md',
+  ],
+  'github-apps': [
+    'rest/authentication/endpoints-available-for-github-app-installation-access-tokens.md',
+    'rest/authentication/permissions-required-for-fine-grained-personal-access-tokens.md',
+    'rest/authentication/permissions-required-for-github-apps.md',
+  ],
+  graphql: [
+    'graphql/overview/breaking-changes.md',
+    'graphql/overview/changelog/2025.md',
+    'graphql/reference/repos.md',
+  ],
+  rest: ['rest/actions/workflow-runs.md', 'rest/issues/issues.md', 'rest/repos/repos.md'],
+}
+
+function pagesToRender(generator: string, pages: Page[]): { render: Page[]; missing: string[] } {
+  const pinned = PINNED_PAGES[generator] ?? []
+  const byPath = new Map(pages.map((page) => [page.relativePath, page]))
+  // Check pins in full-render mode too, so a PR that moves a pinned page fails before merge.
+  const missing = pinned.filter((path) => !byPath.has(path))
+  if (RENDER_ALL || !pinned.length) return { render: pages, missing }
+  return { render: pinned.flatMap((path) => byPath.get(path) ?? []), missing }
+}
+
 describe('autogenerated docs render', () => {
   vi.setConfig({ testTimeout: 3 * 60 * 1000 })
 
   const autogeneratedPages = pageList.filter((page: Page) => page.autogenerated)
+  const pagesByGenerator = Object.groupBy(autogeneratedPages, (page: Page) => page.autogenerated!)
+  // Include pinned generators with no pages left, so their stale pins still fail.
+  const generators = new Set([...Object.keys(pagesByGenerator), ...Object.keys(PINNED_PAGES)])
+  const generatorCases = [...generators].map(
+    (generator) => [generator, pagesByGenerator[generator] ?? []] as const,
+  )
 
-  test('all automated pages', async () => {
+  test.each(generatorCases)('%s pages', async (generator, allPages) => {
+    const { render: pages, missing } = pagesToRender(generator, allPages)
+    expect(
+      missing,
+      `Pinned ${generator} pages not found. Update PINNED_PAGES in this file.`,
+    ).toEqual([])
     // Each page must render with 200 OK and unique heading IDs.
     const errors = (
       await Promise.all(
-        autogeneratedPages.map(async (page: Page) => {
+        pages.map(async (page: Page) => {
           const url = page.permalinks[0].href
           // Slow autogenerated pages get retries to avoid false-positive failures.
           const res = await get(url, { retries: 3 })
 
@@ -22,7 +22,7 @@ Note: for build-gating suites (data-directory, content-linter, generated-referen
 | article-api | Article API endpoints (`/api/pagelist*`, `/api/article/body`, `/api/article/meta`) behind hovercards, llms.txt, and markdown delivery, plus the transformers for autogenerated pages. | Local server with fixture ROOT; no Elasticsearch/GitHub/external network. | **Medium**: reliable (no external infra) but covers real user/API surfaces. Contained, not site-wide. |
 | assets | Dynamic image processing (PNG to WebP, resizing), static asset cache headers keyed by checksum URL, and archived enterprise asset proxying. | Local Express server; checked-in fixture images; external calls mocked with nock. | **Low**: deterministic, mocked network, clear failures. |
 | audit-logs | Audit log event structure, field merging, allowlist filtering, GHES version handling, category notes, and page rendering. | Unit tests run standalone; the rendering test needs the local server (getDOM). | **Medium**: unit tests reliable; the rendering test can flake. Contained to the audit-log reference. |
-| automated-pipelines | The pipeline that auto-generates/syncs content from external sources into markdown, plus autogenerated-page rendering and semver conversion. | Local server for the rendering check (retried HTTP calls); fixtures. | **Medium**: affects rendered docs; the rendering test's retried HTTP calls can flake. |
+| automated-pipelines | The pipeline that auto-generates/syncs content from external sources into markdown, plus autogenerated-page rendering and semver conversion. | Local server for the rendering check (retried HTTP calls); fixtures. Renders all autogenerated pages in the merge queue and on PRs that change pipeline code or generated content, a pinned set per generator otherwise. | **Medium**: affects rendered docs; the rendering test's retried HTTP calls can flake. |
 | color-schemes | Theme cookie parsing and mapping between CSS and Primer React color modes, including bad-input handling. | None (pure-function unit tests). | **Low**: pure-function unit tests, no flake. |
 | content-linter | Markdown/YAML lint compliance: links, frontmatter schema, Liquid syntax, code annotations, alt text, versioning, and data references. | Changed files (DIFF_FILE) or full repo; markdownlint + custom rules. | **Low**: deterministic; reds = real content problems in the PR. |
 | content-render | The Markdown/Liquid to HTML rendering pipeline: templates, parsing, syntax highlighting, link rewriting, and content transforms. | In-process rendering (unified + LiquidJS); cheerio; no external services. | **High**: affects every page; reds = real rendering bugs site-wide. |