From d6537446ed3a365dc1a4c34ce64f3be691761b3b Mon Sep 17 00:00:00 2001
From: shendeguize <30931540+shendeguize@users.noreply.github.com>
Date: Wed, 16 Sep 2026 13:17:39 +0800
Subject: [PATCH] fix(pages): pin artifact upload directly

Avoid the upload-pages-artifact composite action because its transitive version tag is rejected by the repository action policy.
---
 .github/workflows/preview-pages.yml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/preview-pages.yml b/.github/workflows/preview-pages.yml
index 929e4f0..8adb453 100644
--- a/.github/workflows/preview-pages.yml
+++ b/.github/workflows/preview-pages.yml
@@ -30,9 +30,14 @@ jobs:
         env:
           ORGANON_CORE_ROOT: ${{ github.workspace }}/product
         run: npm run check:site
-      - uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa
+      - name: Archive Pages artifact
+        run: tar --dereference --directory product/dist/site/ -cvf "$RUNNER_TEMP/artifact.tar" --exclude=.git --exclude=.github .
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         with:
-          path: product/dist/site/
+          name: github-pages-${{ github.run_attempt }}
+          path: ${{ runner.temp }}/artifact.tar
+          retention-days: 1
+          if-no-files-found: error
   deploy:
     needs: build
     runs-on: ubuntu-24.04
@@ -45,4 +50,6 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
       - uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e
-        id: deployment
\ No newline at end of file
+        id: deployment
+        with:
+          artifact_name: github-pages-${{ github.run_attempt }}
\ No newline at end of file