Document how to verify the integrity of a release (#4784) #2005
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: sitespeed.io action example | |
| on: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| run-sitespeed: | |
| runs-on: ubuntu-latest | |
| if: ${{ !contains(github.event.head_commit.message, 'docs:') }} | |
| name: running sitespeed.io | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - name: code checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| # Here we build our own container to make sure we test against our latest code | |
| # but YOU can just used the latest version by specifying | |
| # sitespeedio/sitespeed.io:VERSION | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4 | |
| - name: Build Docker containers | |
| uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7 | |
| with: | |
| context: . | |
| platforms: linux/amd64 | |
| load: true | |
| tags: sitespeedio/sitespeed.io | |
| cache-from: type=gha,scope=full | |
| cache-to: type=gha,scope=full,mode=max | |
| - name: running sitespeed.io container with arguments and optional Docker options | |
| run: docker run -v "$(pwd):/sitespeed.io" sitespeedio/sitespeed.io https://www.sitespeed.io --budget.configPath .github/budget.json -n 1 |