-
Notifications
You must be signed in to change notification settings - Fork 0
Revert to render site temporarily #10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
This file was deleted.
| Original file line number | Diff line number | Diff line change | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,83 @@ | |||||||||||||||||
|
|
|||||||||||||||||
| # It was adapted by Candace Savonen for the OTTR_template https://github.com/jhudsl/OTTR_Template. | |||||||||||||||||
|
|
|||||||||||||||||
| # This code was adapted by Carrie Wright to enable automated rendering of the site associated with this repository | |||||||||||||||||
|
|
|||||||||||||||||
| name: Render html | |||||||||||||||||
|
|
|||||||||||||||||
| # Controls when the action will run. Triggers the workflow on push | |||||||||||||||||
| # events only for the master branch | |||||||||||||||||
| on: | |||||||||||||||||
| workflow_dispatch: | |||||||||||||||||
| push: | |||||||||||||||||
| branches: [ main ] | |||||||||||||||||
| paths: | |||||||||||||||||
| - '**.Rmd' | |||||||||||||||||
| - styles.css | |||||||||||||||||
| - _site.yml | |||||||||||||||||
| - resources/images/*.png | |||||||||||||||||
| - resources/images/favicon.ico | |||||||||||||||||
|
|
|||||||||||||||||
| jobs: | |||||||||||||||||
| yaml-check: | |||||||||||||||||
| name: Load user automation choices | |||||||||||||||||
| runs-on: ubuntu-latest | |||||||||||||||||
| steps: | |||||||||||||||||
| - name: Checkout | |||||||||||||||||
| uses: actions/checkout@v4 | |||||||||||||||||
|
|
|||||||||||||||||
| # Use the yaml-env-action action. | |||||||||||||||||
| - name: Load environment from YAML | |||||||||||||||||
| uses: doughepi/yaml-env-action@v1.0.0 | |||||||||||||||||
| with: | |||||||||||||||||
| files: config_automation.yml # Pass a space-separated list of configuration files. Rightmost files take precedence. | |||||||||||||||||
|
|
|||||||||||||||||
| outputs: | |||||||||||||||||
| rendering_docker_image: "${{ env.RENDERING_DOCKER_IMAGE }}" | |||||||||||||||||
|
|
|||||||||||||||||
| # This workflow contains a single job called "build-all" | |||||||||||||||||
| render-main: | |||||||||||||||||
| needs: yaml-check | |||||||||||||||||
| runs-on: ubuntu-latest | |||||||||||||||||
| container: | |||||||||||||||||
| image: ${{needs.yaml-check.outputs.rendering_docker_image}} | |||||||||||||||||
|
|
|||||||||||||||||
| steps: | |||||||||||||||||
| # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it | |||||||||||||||||
| - name: checkout | |||||||||||||||||
| uses: actions/checkout@v4 | |||||||||||||||||
| with: | |||||||||||||||||
| # get the full repo | |||||||||||||||||
| fetch-depth: 0 | |||||||||||||||||
| # use github PAT | |||||||||||||||||
| token: ${{ secrets.GH_PAT }} | |||||||||||||||||
|
|
|||||||||||||||||
| # We want a fresh run of the renders each time - so first delete old html files | |||||||||||||||||
| - name: Delete old *.html | |||||||||||||||||
| run: Rscript -e "rmarkdown::clean_site(preview = FALSE)" | |||||||||||||||||
|
|
|||||||||||||||||
| # Now we want to render all the html files from the Rmd files | |||||||||||||||||
| - name: Run render html | |||||||||||||||||
| id: site | |||||||||||||||||
| run: Rscript -e "rmarkdown::render_site()" | |||||||||||||||||
|
|
|||||||||||||||||
| # This checks on the steps before it and makes sure that they completed. | |||||||||||||||||
| # If the renders didn't complete we don't want to commit the file changes | |||||||||||||||||
| - name: Check on render steps | |||||||||||||||||
| if: steps.site.outcome != 'success' | |||||||||||||||||
| run: | | |||||||||||||||||
| echo site status ${{steps.site.outcome}} | |||||||||||||||||
| exit 1 | |||||||||||||||||
|
|
|||||||||||||||||
| # Commit the rendered site files - html files and site_libs files | |||||||||||||||||
| # The git reset step will remove any other files created in this workflow, such as API keys | |||||||||||||||||
| - name: Commit rendered site files | |||||||||||||||||
| run: | | |||||||||||||||||
| git config --global --add safe.directory $GITHUB_WORKSPACE | |||||||||||||||||
| git config --global user.name 'github-actions[bot]' | |||||||||||||||||
| git config --global user.email 'github-actions[bot]@users.noreply.github.com' | |||||||||||||||||
| git add --force docs/* | |||||||||||||||||
| git commit -m 'Render site' || echo "No changes to commit" | |||||||||||||||||
| git reset --hard HEAD | |||||||||||||||||
| git pull --rebase --allow-unrelated-histories --strategy-option=ours | |||||||||||||||||
| git push origin main || echo "No changes to push" | |||||||||||||||||
|
Comment on lines
+40
to
+83
Check warningCode scanning / CodeQL Workflow does not contain permissions Medium
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
Copilot AutofixAI about 1 year ago To fix the issue, we will add a
Suggested changeset
1
.github/workflows/render-site.yml
Copilot is powered by AI and may make mistakes. Always verify output.
Refresh and try again.
|
|||||||||||||||||
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Copilot Autofix
AI about 1 year ago
To fix the issue, we will add a
permissionsblock to the workflow. This block will specify the minimal permissions required for the workflow to function correctly. Based on the workflow's actions, it needscontents: writeto commit changes to the repository and possiblycontents: readfor other operations. We will add thepermissionsblock at the root level of the workflow to apply to all jobs unless overridden.