-
-
Notifications
You must be signed in to change notification settings - Fork 253
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Publish rendered HTML for each Pull Request #348
Comments
It already exists, but only for non-fork branches. |
The current process for reviewing non-fork branches is even worse, actually:
I.e. I just won't do it. And potentially merge a breaking change. |
An alternative to building all fork branches by default is only building them when someone with merge access submits a comment like |
This is not as trivial as it sounds. Problem 1: Cloudflare Pages app does not have OOTB support for building branches in forks. We need to use the https://github.com/tomjschuster/cloudflare-pages-deploy-action GitHub Action to achive building pages for branches in forks. This requires some work, but should be doable. Problem 2: https://github.com/tomjschuster/cloudflare-pages-deploy-action requires the use of Cloudflare API Token. This token is account-wide and cannot be restricted to a single project. Currently, nix.dev project is owned by @domenkozar's personal Cloudflare account, along with his other projects. So it's impossible for us to get the Cloudflare API Token. Solution:
@lucperkins: could you please work with the foundation to get the Cloudflare account opened? I can then do the rest. |
https://github.com/cloudflare/pages-action allows us to do that securely. |
I'll take a look. |
I wonder if it's worth looking into other static site host options. I know that nixos.org uses Netlify. Maybe we should consider moving to Netlify if it allows deploy previews on PRs from forks? |
@fricklerhandwerk Could I request to be assigned to this issue? Thanks |
This workflow uses Cloudflare's official GitHub Action for invoking manual deployments from GitHub CI. workflow_run is used to prevent malicious actors from (ab)using secrets[1]. Closes NixOS#348 [1]: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
This workflow uses Cloudflare's official GitHub Action for invoking manual deployments from GitHub CI. workflow_run is used to prevent malicious actors from (ab)using secrets[1]. Closes NixOS#348 [1]: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
This workflow uses Cloudflare's official GitHub Action for invoking manual deployments from GitHub CI. workflow_run is used to prevent malicious actors from (ab)using secrets[1]. Closes NixOS#348 [1]: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
As a maintainer of nix.dev documentation, I want to be able to quickly merge trivial PRs.
Current process:
git pull
latestnix.dev
repo.Ideal process:
The text was updated successfully, but these errors were encountered: