Skip to content

Commit e43eeaf

Browse files
authored
Merge pull request #3664 from github/ahpook/disable-jekyll
disable potentially vulnerable workflow
2 parents 443bf3b + 89f75e0 commit e43eeaf

1 file changed

Lines changed: 65 additions & 65 deletions

File tree

Lines changed: 65 additions & 65 deletions
Original file line numberDiff line numberDiff line change
@@ -1,65 +1,65 @@
1-
# This workflow uses actions that are not certified by GitHub.
2-
# They are provided by a third-party and are governed by
3-
# separate terms of service, privacy policy, and support
4-
# documentation.
5-
6-
# Sample workflow for building and deploying a Jekyll site to GitHub Pages
7-
name: Deploy Jekyll site to Pages preview environment
8-
on:
9-
# Runs on pull requests targeting the default branch
10-
pull_request_target:
11-
branches: ["main"]
12-
# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
13-
permissions:
14-
contents: read
15-
pages: write
16-
id-token: write
17-
# Allow only one concurrent deployment per PR, skipping runs queued between the run in-progress and latest queued.
18-
# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
19-
concurrency:
20-
group: "pages-preview @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
21-
cancel-in-progress: false
22-
jobs:
23-
# Build job
24-
build:
25-
environment:
26-
name: "Pages Preview"
27-
# Limit permissions of the GITHUB_TOKEN for untrusted code
28-
permissions:
29-
contents: read
30-
runs-on: ubuntu-latest
31-
steps:
32-
- name: Checkout
33-
uses: actions/checkout@v6.0.2
34-
with:
35-
# For PRs make sure to checkout the PR branch
36-
ref: ${{ github.event.pull_request.head.sha }}
37-
repository: ${{ github.event.pull_request.head.repo.full_name }}
38-
- name: Setup Pages
39-
uses: actions/configure-pages@v6.0.0
40-
- name: Build with Jekyll
41-
uses: actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697 # v1
42-
with:
43-
source: ./
44-
destination: ./_site
45-
- name: Upload artifact
46-
# Automatically uploads an artifact from the './_site' directory by default
47-
uses: actions/upload-pages-artifact@v5.0.0
48-
# Deployment job
49-
deploy:
50-
environment:
51-
name: "Pages Preview"
52-
url: ${{ steps.deployment.outputs.page_url }}
53-
# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
54-
permissions:
55-
contents: read
56-
pages: write
57-
id-token: write
58-
runs-on: ubuntu-latest
59-
needs: build
60-
steps:
61-
- name: Deploy to GitHub Pages
62-
id: deployment
63-
uses: actions/deploy-pages@v5.0.0
64-
with:
65-
preview: "true"
1+
# # This workflow uses actions that are not certified by GitHub.
2+
# # They are provided by a third-party and are governed by
3+
# # separate terms of service, privacy policy, and support
4+
# # documentation.
5+
#
6+
# # Sample workflow for building and deploying a Jekyll site to GitHub Pages
7+
# name: Deploy Jekyll site to Pages preview environment
8+
# on:
9+
# # Runs on pull requests targeting the default branch
10+
# pull_request_target:
11+
# branches: ["main"]
12+
# # Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
13+
# permissions:
14+
# contents: read
15+
# pages: write
16+
# id-token: write
17+
# # Allow only one concurrent deployment per PR, skipping runs queued between the run in-progress and latest queued.
18+
# # However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
19+
# concurrency:
20+
# group: "pages-preview @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
21+
# cancel-in-progress: false
22+
# jobs:
23+
# # Build job
24+
# build:
25+
# environment:
26+
# name: "Pages Preview"
27+
# # Limit permissions of the GITHUB_TOKEN for untrusted code
28+
# permissions:
29+
# contents: read
30+
# runs-on: ubuntu-latest
31+
# steps:
32+
# - name: Checkout
33+
# uses: actions/checkout@v6.0.2
34+
# with:
35+
# # For PRs make sure to checkout the PR branch
36+
# ref: ${{ github.event.pull_request.head.sha }}
37+
# repository: ${{ github.event.pull_request.head.repo.full_name }}
38+
# - name: Setup Pages
39+
# uses: actions/configure-pages@v6.0.0
40+
# - name: Build with Jekyll
41+
# uses: actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697 # v1
42+
# with:
43+
# source: ./
44+
# destination: ./_site
45+
# - name: Upload artifact
46+
# # Automatically uploads an artifact from the './_site' directory by default
47+
# uses: actions/upload-pages-artifact@v5.0.0
48+
# # Deployment job
49+
# deploy:
50+
# environment:
51+
# name: "Pages Preview"
52+
# url: ${{ steps.deployment.outputs.page_url }}
53+
# # Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
54+
# permissions:
55+
# contents: read
56+
# pages: write
57+
# id-token: write
58+
# runs-on: ubuntu-latest
59+
# needs: build
60+
# steps:
61+
# - name: Deploy to GitHub Pages
62+
# id: deployment
63+
# uses: actions/deploy-pages@v5.0.0
64+
# with:
65+
# preview: "true"

0 commit comments

Comments
 (0)