feat: add vulnerabilities toolset for AI-assisted triage (#610) #54
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Documentation | |
| on: | |
| push: | |
| branches: [main] | |
| paths: | |
| - "docs/**" | |
| - "mkdocs.yml" | |
| - "requirements-docs.txt" | |
| - "tools/registry.ts" | |
| - "schemas.ts" | |
| - "scripts/generate-tool-docs.ts" | |
| - ".github/workflows/docs.yml" | |
| workflow_dispatch: | |
| # Workflow-level permissions are read-only by default; the deploy job opts | |
| # into the write scopes it actually needs. | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: "pages" | |
| cancel-in-progress: false | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| # actions/checkout@v4 — pin to commit SHA for supply-chain safety | |
| uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 | |
| with: | |
| fetch-depth: 0 | |
| # Drop the GITHUB_TOKEN credential after checkout; nothing in the | |
| # build job needs to push or call the API. | |
| persist-credentials: false | |
| - name: Set up Python | |
| # actions/setup-python@v5 | |
| uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 | |
| with: | |
| python-version: "3.12" | |
| cache: "pip" | |
| cache-dependency-path: requirements-docs.txt | |
| - name: Install dependencies | |
| run: pip install -r requirements-docs.txt | |
| - name: Build site | |
| run: | | |
| mkdocs build --strict | |
| # Prevent Jekyll processing if legacy Pages ever reads the artifact | |
| touch site/.nojekyll | |
| - name: Upload Pages artifact | |
| # actions/upload-pages-artifact@v3 | |
| uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa | |
| with: | |
| path: site | |
| deploy: | |
| needs: build | |
| runs-on: ubuntu-latest | |
| # Pages deployment needs to publish the artifact and request an OIDC | |
| # token; scope those write permissions to this job only. | |
| permissions: | |
| pages: write | |
| id-token: write | |
| environment: | |
| name: github-pages | |
| url: ${{ steps.deployment.outputs.page_url }} | |
| steps: | |
| - name: Deploy to GitHub Pages | |
| id: deployment | |
| # actions/deploy-pages@v4 | |
| uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e |