mirror of
https://github.com/tiennm99/is-a-dev.git
synced 2026-10-06 20:15:51 +00:00
DIBSTER
8d19ccbcb2
Updated all GitHub Actions dependencies across workflows to use full commit SHAs instead of mutable version tags (e.g., `actions/checkout`, `actions/setup-node`, and `actions/stale`). This hardens the CI/CD pipeline by ensuring action dependencies are strictly immutable and prevents potential supply chain attacks.
33 lines
838 B
YAML
33 lines
838 B
YAML
name: Publish
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
paths:
|
|
- "domains/*"
|
|
- ".github/workflows/publish.yml"
|
|
- "util/reserved.json"
|
|
- "dnsconfig.js"
|
|
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: ${{ github.ref }}-publish
|
|
|
|
jobs:
|
|
dns:
|
|
name: DNS
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
|
|
- name: Generate creds.json
|
|
run: echo '{"cloudflare":{"TYPE":"CLOUDFLAREAPI","apitoken":"$CLOUDFLARE_API_TOKEN"}}' > ./creds.json
|
|
|
|
- name: Push DNS records
|
|
uses: is-a-dev/dnscontrol-action@main
|
|
env:
|
|
CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
|
|
with:
|
|
args: push
|