mirror of
https://github.com/jellyfin/jellyfin.org.git
synced 2026-09-03 05:30:05 +03:00
Andrew Rabert
d546cd9d4e
Extract build steps to reusable __build.yml workflow. Call it from
build.yml with permissions: {} to prevent untrusted PR code from
accessing GITHUB_TOKEN. Secrets not passed to reusable workflow.
107 lines
4.4 KiB
YAML
107 lines
4.4 KiB
YAML
name: build
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
|
|
cancel-in-progress: true
|
|
|
|
on:
|
|
pull_request_target:
|
|
push:
|
|
branches: [master]
|
|
|
|
jobs:
|
|
build:
|
|
uses: ./.github/workflows/__build.yml
|
|
permissions: {}
|
|
with:
|
|
ref: ${{ github.event.pull_request.head.sha || github.sha }}
|
|
upload-pages-artifact: ${{ github.event_name == 'push' && github.repository == 'jellyfin/jellyfin.org' }}
|
|
|
|
deploy:
|
|
if: github.event_name == 'push' && github.repository == 'jellyfin/jellyfin.org'
|
|
name: Deploy to GitHub Pages
|
|
permissions:
|
|
pages: write
|
|
id-token: write
|
|
concurrency: build-deploy-pages
|
|
environment:
|
|
name: github-pages
|
|
url: ${{ steps.deployment.outputs.page_url }}
|
|
runs-on: ubuntu-latest
|
|
needs: build
|
|
steps:
|
|
- name: Deploy to GitHub Pages
|
|
id: deployment
|
|
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
|
|
|
|
publish:
|
|
if: github.event_name != 'push' && github.repository == 'jellyfin/jellyfin.org'
|
|
name: Deploy to Cloudflare Pages
|
|
runs-on: ubuntu-latest
|
|
needs: build
|
|
steps:
|
|
- name: Add comment
|
|
uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3.0.1
|
|
if: github.event_name == 'pull_request_target'
|
|
with:
|
|
github-token: ${{ secrets.JF_BOT_TOKEN }}
|
|
message: |
|
|
## Cloudflare Pages deployment
|
|
|
|
| **Latest commit** | <code>${{ github.event.pull_request.head.sha || github.sha }}</code> |
|
|
|-------------------|:-:|
|
|
| **Status** | 🔄 Deploying... |
|
|
| **Preview URL** | Not available |
|
|
| **Type** | 🔀 Preview |
|
|
pr-number: ${{ github.event.pull_request.number }}
|
|
comment-tag: CFPages-deployment
|
|
mode: recreate
|
|
- name: Download workflow artifact
|
|
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
|
|
with:
|
|
name: jellyfin-org__build
|
|
path: build
|
|
- name: Publish to Cloudflare
|
|
id: cf
|
|
uses: cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3.14.1
|
|
with:
|
|
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
|
|
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
|
|
command: pages deploy build --project-name=jellyfin-org --branch=${{
|
|
(github.event_name != 'pull_request_target' || github.event.pull_request.head.repo.full_name == github.repository)
|
|
&& (github.event.pull_request.head.ref || github.ref_name)
|
|
|| format('{0}/{1}', github.event.pull_request.head.repo.full_name, github.event.pull_request.head.ref)
|
|
}} --commit-hash=${{ github.event.pull_request.head.sha || github.sha }}
|
|
- name: Update status comment (Success)
|
|
if: ${{ github.event_name == 'pull_request_target' && success() }}
|
|
uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3.0.1
|
|
with:
|
|
github-token: ${{ secrets.JF_BOT_TOKEN }}
|
|
message: |
|
|
## Cloudflare Pages deployment
|
|
|
|
| **Latest commit** | <code>${{ github.event.pull_request.head.sha || github.sha }}</code> |
|
|
|-------------------|:-:|
|
|
| **Status** | ✅ Deployed! |
|
|
| **Preview URL** | ${{ steps.cf.outputs.deployment-url != '' && steps.cf.outputs.deployment-url || 'Not available' }} |
|
|
| **Type** | 🔀 Preview |
|
|
pr-number: ${{ github.event.pull_request.number }}
|
|
comment-tag: CFPages-deployment
|
|
mode: recreate
|
|
- name: Update status comment (Failure)
|
|
if: ${{ github.event_name == 'pull_request_target' && failure() }}
|
|
uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3.0.1
|
|
with:
|
|
github-token: ${{ secrets.JF_BOT_TOKEN }}
|
|
message: |
|
|
## Cloudflare Pages deployment
|
|
|
|
| **Latest commit** | <code>${{ github.event.pull_request.head.sha || github.sha }}</code> |
|
|
|-------------------|:-:|
|
|
| **Status** | ❌ Failure. Check workflow logs for details |
|
|
| **Preview URL** | Not available |
|
|
| **Type** | 🔀 Preview |
|
|
pr-number: ${{ github.event.pull_request.number }}
|
|
comment-tag: CFPages-deployment
|
|
mode: recreate
|