docs(git-id-switcher): add Snyk vulnerability badge to all 26 languag… #131
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Documentation | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - 'README.md' # Monorepo root | |
| - 'CONTRIBUTING.md' # Monorepo root | |
| - 'LICENSE' # Monorepo root | |
| - 'extensions/git-id-switcher/**/*.md' # All .md files (auto-detected) | |
| - 'extensions/git-id-switcher/LICENSE' # Extension LICENSE | |
| workflow_dispatch: # Manual trigger | |
| permissions: {} | |
| jobs: | |
| deploy: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read # Read-only: CDN deploy only (Option D) | |
| # Prevent forks from deploying (no Cloudflare secrets) | |
| if: github.repository == 'nullvariant/nullvariant-vscode-extensions' | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@fe104658747b27e96e4f7e80cd0a94068e53901d # v2.16.1 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| # Note: Hash update is handled by developers locally + hash-check.yml in PRs | |
| # This workflow only deploys to CDN (Option D: Pre-merge CI verification) | |
| - name: Deploy documentation to R2 | |
| run: | | |
| R2_BASE="kura/nullvariant.com/nullvariant-vscode-extensions" | |
| EXT_PATH="extensions/git-id-switcher" | |
| # === Monorepo root files === | |
| echo "=== Deploying monorepo root files ===" | |
| if [ -f "README.md" ]; then | |
| echo "Deploying monorepo README.md..." | |
| npx wrangler@4.54.0 r2 object put "${R2_BASE}/README.md" \ | |
| --file "README.md" \ | |
| --content-type "text/markdown; charset=utf-8" \ | |
| --remote | |
| fi | |
| if [ -f "CONTRIBUTING.md" ]; then | |
| echo "Deploying monorepo CONTRIBUTING.md..." | |
| npx wrangler@4.54.0 r2 object put "${R2_BASE}/CONTRIBUTING.md" \ | |
| --file "CONTRIBUTING.md" \ | |
| --content-type "text/markdown; charset=utf-8" \ | |
| --remote | |
| fi | |
| if [ -f "LICENSE" ]; then | |
| echo "Deploying monorepo LICENSE..." | |
| npx wrangler@4.54.0 r2 object put "${R2_BASE}/LICENSE" \ | |
| --file "LICENSE" \ | |
| --content-type "text/plain; charset=utf-8" \ | |
| --remote | |
| fi | |
| # === Extension files (all .md + LICENSE) === | |
| echo "=== Deploying all extension .md files ===" | |
| # Deploy all .md files in extension directory (recursive) | |
| find "${EXT_PATH}" -name "*.md" -type f \ | |
| ! -path "${EXT_PATH}/node_modules/*" \ | |
| ! -path "${EXT_PATH}/out/*" \ | |
| ! -path "${EXT_PATH}/.vscode-test/*" | while read -r doc_file; do | |
| relative_path="${doc_file#${EXT_PATH}/}" | |
| echo "Deploying ${relative_path}..." | |
| npx wrangler@4.54.0 r2 object put "${R2_BASE}/${EXT_PATH}/${relative_path}" \ | |
| --file "$doc_file" \ | |
| --content-type "text/markdown; charset=utf-8" \ | |
| --remote | |
| done | |
| # Deploy extension LICENSE | |
| if [ -f "${EXT_PATH}/LICENSE" ]; then | |
| echo "Deploying extension LICENSE..." | |
| npx wrangler@4.54.0 r2 object put "${R2_BASE}/${EXT_PATH}/LICENSE" \ | |
| --file "${EXT_PATH}/LICENSE" \ | |
| --content-type "text/plain; charset=utf-8" \ | |
| --remote | |
| fi | |
| echo "=== Documentation deployed successfully! ===" | |
| env: | |
| CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }} | |
| CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} |