-
Notifications
You must be signed in to change notification settings - Fork 66
add first attempt at page building tests for CI #361
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
cc3456a
626811d
4146a2d
991e81a
6cedce2
6bcb9de
8279ee8
2ab3187
ef61ee0
706b84e
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,27 @@ | ||||||||||
| name: Build Jekyll site | ||||||||||
| on: | ||||||||||
| pull_request: | ||||||||||
| workflow_dispatch: | ||||||||||
|
|
||||||||||
| jobs: | ||||||||||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Best practice is to be explicit with the permissions:
Suggested change
This is probably not essentially, but does protect against GH changing default permissions in the future. reference |
||||||||||
|
|
||||||||||
| build: | ||||||||||
| runs-on: ubuntu-latest | ||||||||||
|
|
||||||||||
| permissions: | ||||||||||
| contents: write | ||||||||||
| pull-requests: write | ||||||||||
|
|
||||||||||
| steps: | ||||||||||
| - name: Checkout | ||||||||||
| uses: actions/checkout@v7 | ||||||||||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. More of an FYI: this style of version specification is being discouraged for security nowadays. This is because version numbers on GH actions are not immutable, and could be maliciously changed/released. The workaround is to specific full git SHAs. However, this is very tedious to keep up with, and really necessitates dependabot managing actions. Given that these are all 'actions` maintained I think the risk of a malicious release is rather low, so I think in this case it's fine as is. Just an FYI. Reference.
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. |
||||||||||
| - name: Setup Pages | ||||||||||
| uses: actions/configure-pages@v6 | ||||||||||
| - name: Build | ||||||||||
| uses: actions/jekyll-build-pages@v1 | ||||||||||
| - name: Upload artifact | ||||||||||
| uses: actions/upload-pages-artifact@v5 | ||||||||||
| with: | ||||||||||
| retention-days: 14 | ||||||||||
|
|
||||||||||
|
|
||||||||||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I am used to limiting this to specific branches. However, if you aren't deploying anything I think that won't be necessary here.