Files
lucidia-metaverse/.github/workflows/deploy.yml
Alexa Louise 63c250378c Fix: Pin GitHub Actions to commit SHAs for security compliance
Update workflow to use full-length commit SHAs instead of version tags
to comply with BlackRoad-OS organization security policy.

Actions pinned:
- actions/checkout@v4.2.2 → 11bd719
- actions/setup-node@v4.1.0 → 39370e3
- cloudflare/wrangler-action@v3.12.0 → 9681c29
- actions/github-script@v7.0.1 → 60a0d83

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-22 19:06:38 -06:00

58 lines
1.5 KiB
YAML

name: Deploy to Cloudflare Pages
on:
push:
branches:
- main
- master
pull_request:
branches:
- main
- master
jobs:
deploy:
runs-on: ubuntu-latest
permissions:
contents: read
deployments: write
name: Deploy to Cloudflare Pages
steps:
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Setup Node.js
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
with:
node-version: '18'
cache: 'npm'
- name: Install dependencies
run: npm ci
- name: Build project
run: npm run build
env:
NODE_ENV: production
- name: Deploy to Cloudflare Pages
uses: cloudflare/wrangler-action@9681c2997648301493e78cacbfb790a9f19c833f # v3.12.0
with:
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
command: pages deploy dist --project-name=lucidia-earth
- name: Comment deployment URL on PR
if: github.event_name == 'pull_request'
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
with:
script: |
github.rest.issues.createComment({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
body: '🚀 Preview deployment ready at Cloudflare Pages!'
})