Skip to content
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 3 additions & 4 deletions .github/workflows/build_and_deploy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ on:
default: "/"
type: string
environment:
description: GHA environment name
description: GitHub Actions environment name (used for scoping secrets and deployment)
required: true
type: string
secrets:
Expand All @@ -35,6 +35,7 @@ jobs:
env:
CI: true
NODE_ENV: production
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
AWS_PAGER: ""
HOSTNAME: ${{ inputs.hostname }}
BASE_URL: ${{ inputs.base_url }}
Expand All @@ -53,16 +54,14 @@ jobs:
uses: actions/cache@v3
with:
path: node_modules/.cache
key: ${{ runner.os }}-webpack-cache
key: ${{ runner.os }}-webpack-cache-${{ hashFiles('yarn.lock') }}
- name: Install awscli
uses: unfor19/install-aws-cli-action@v1
- name: Install jq
run: sudo apt-get install -y jq
- name: Install dependencies
run: yarn install --frozen-lockfile
- name: Build the Docusaurus site
env:
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
run: yarn build
- name: Deploy the Docusaurus site
env:
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/delete-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ jobs:
name: review/${{ github.ref_name }}
env:
CI: true
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
AWS_PAGER: ""
BASE_URL: /${{ github.ref_name }}/
AWS_DEFAULT_REGION: us-east-1
Expand All @@ -23,6 +24,7 @@ jobs:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
run: |
echo "Removing files at s3://${S3_BUCKET_NAME}${BASE_URL}"
aws s3 rm --recursive s3://${S3_BUCKET_NAME}${BASE_URL}
export INVALIDATION_ID=$(
aws cloudfront create-invalidation \
Expand Down
64 changes: 32 additions & 32 deletions .github/workflows/pr.yml
Original file line number Diff line number Diff line change
@@ -1,44 +1,44 @@
name: Pull Request Checks

on:
pull_request:
branches:
- main
merge_group:
types:
- checks_requested
pull_request:
branches:
- main
merge_group:
types:
- checks_requested

env:
CI: true
NODE_ENV: production
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"

jobs:
build-and-deploy:
runs-on: ubuntu-latest
env:
CI: true
NODE_ENV: production
steps:
- uses: actions/checkout@v4
- name: Set up Node.js
uses: actions/setup-node@v3
with:
node-version: '20.x'
cache: 'yarn'
- name: Docusaurus Webpack cache
uses: actions/cache@v3
with:
path: node_modules/.cache
key: ${{ runner.os }}-webpack-cache
- name: Install dependencies
run: yarn install --frozen-lockfile
- name: Build the Docusaurus site
env:
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
run: yarn build
spellcheck:
runs-on: ubuntu-latest
steps:
build-and-deploy:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Set up Node.js
uses: actions/setup-node@v3
with:
node-version: '20.x'
cache: 'yarn'
- name: Docusaurus Webpack cache
uses: actions/cache@v3
with:
path: node_modules/.cache
key: ${{ runner.os }}-webpack-cache-${{ hashFiles('yarn.lock') }}
- name: Install dependencies
run: yarn install --frozen-lockfile
- name: Build the Docusaurus site
run: yarn build
spellcheck:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: codespell-project/actions-codespell@master
name: Check spelling
with:
skip: "*.svg,*.js,*.map,*.css,*.scss"
ignore_words_list: "aks,atleast,cros,ddress,fiel,ist,nd,ot,pullrequest,ser,shttp,wast,fo,seldomly,delt,cruzer,plack,secur,te,nginx,Nginx,notin"
path: docs

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}