Pin GitHub Actions to commit SHAs for enhanced security (#199) #101

	name: Deploy to GitHub Pages

	on:
	# Trigger the workflow every time you push to the `main` branch
	# Using a different branch name? Replace `main` with your branch’s name
	push:
	branches: [ main ]
	# Allows you to run this workflow manually from the Actions tab on GitHub.
	workflow_dispatch:

	# Allow this job to clone the repo and create a page deployment
	permissions:
	contents: read
	pages: write
	id-token: write

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout your repository using git
	uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4
	with:
	submodules: true
	- name: Install, build, and upload your site
	uses: withastro/action@32474c4384d86fc69c1739a9cddc665769fb88b5 # v2
	# with:
	# path: . # The root location of your Astro project inside the repository. (optional)
	# node-version: 20 # The specific version of Node that should be used to build your site. Defaults to 20. (optional)
	# package-manager: pnpm@latest # The Node package manager that should be used to install dependencies and build your site. Automatically detected based on your lockfile. (optional)

	deploy:
	needs: build
	runs-on: ubuntu-latest
	environment:
	name: github-pages
	url: ${{ steps.deployment.outputs.page_url }}
	steps:
	- name: Deploy to GitHub Pages
	id: deployment
	uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4

Provide feedback