Skip to content

Feat/ddraig pages - #459

Open
hyperpolymath wants to merge 2 commits into
mainfrom
feat/ddraig-pages
Open

Feat/ddraig pages#459
hyperpolymath wants to merge 2 commits into
mainfrom
feat/ddraig-pages

Conversation

@hyperpolymath

@hyperpolymath hyperpolymath commented Jul 29, 2026

Copy link
Copy Markdown
Owner

Summary

Closes #

Type of change

  • 🐛 Bug fix (non-breaking change that fixes an issue)
  • ✨ New feature (non-breaking change that adds functionality)
  • 💥 Breaking change (would change existing behaviour)
  • 🕳️ Soundness fix (fixes a checker/proof false-negative)
  • 📖 Documentation
  • 🧹 Refactor / tech debt (behaviour-preserving)
  • ⚡ Performance
  • 🔧 Build / CI / tooling

How has this been verified?

Checklist

  • My commits are signed (git commit -S).
  • I ran the project's own checks/tests locally and they pass.
  • New files carry the correct SPDX-License-Identifier (code/config MPL-2.0,
    prose CC-BY-SA-4.0); I did not relicense existing files.
  • Docs are updated, and no public claim now overstates what the code does.
  • I have not introduced a soundness hole (or I have flagged where I might have).

Notes for reviewers


Summary by Gitar

  • CI / Build:
    • Added pages.yml workflow to build and deploy documentation via Ddraig SSG
  • Documentation:
    • Updated licenses in the-hotchocolabot to PMPL-1.0-or-later for code and CC-BY-SA-4.0 for docs

This will update automatically on new commits.

hyperpolymath and others added 2 commits July 19, 2026 13:35
- Update README: Code is under PMPL-1.0-or-later and docs are under CC-BY-SA-4.0
- Update LICENSE: Add dual licensing header, fix SPDX identifier
- Add LICENSES directory with PMPL-1.0-or-later.txt and CC-BY-SA-4.0.txt

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
Comment thread .github/workflows/pages.yml
@gitar-bot

gitar-bot Bot commented Jul 29, 2026

Copy link
Copy Markdown

Note

Automatic reviews are paused because your trial's included automatic processing has been used for this period. Upgrade now, or comment "Gitar review" to run a review anytime.
Learn more

Code Review ✅ Approved 1 resolved / 1 findings

Adds a GitHub Actions workflow to deploy documentation via Ddraig SSG alongside license updates. Pin the actions and SSG checkout versions in pages.yml to ensure reproducible deployments.

Auto-approved and auto-merge armed: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria. — merges when pipeline and required approvals pass.

✅ 1 resolved
Security: pages.yml uses unpinned actions and unpinned SSG checkout

📄 .github/workflows/pages.yml:20-34
pages.yml references actions/checkout@v4, actions/upload-pages-artifact@v3 and actions/deploy-pages@v4 by mutable tag, and checks out hyperpolymath/ddraig-ssg with no ref, so it builds from whatever the default branch HEAD is. This diverges from the repo's own convention (casket-pages.yml and scorecard.yml pin every action to a full commit SHA) and means a compromised or changed upstream runs with pages: write/id-token: write in CI. Pin all actions to full commit SHAs and pin the ddraig-ssg checkout to a specific ref/SHA.

Options

Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Compact
gitar display:verbose         

Was this helpful? React with 👍 / 👎 | Gitar

@gitar-bot

gitar-bot Bot commented Jul 29, 2026

Copy link
Copy Markdown

⚠️ Gitar auto-approved this PR but could not enable auto-merge: auto-merge is disabled for this repository — enable "Allow auto-merge" in the repository settings.

@gitar-bot gitar-bot Bot added the gitar-approved Added by Gitar label Jul 29, 2026

@gitar-bot gitar-bot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Gitar has auto-approved this PR and enabled auto-merge (configure)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

gitar-approved Added by Gitar

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant