# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json

name: Build and Deploy to GitHub Pages

on:

push:

branches:

- main

# Allows you to run this workflow manually from the Actions tab

workflow_dispatch:

permissions:

contents: read

pages: write

id-token: write

jobs:

build:

name: Build for GitHub Pages

runs-on: ubuntu-latest

steps:

- name: Harden the runner (Audit all outbound calls)

uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4

with:

egress-policy: audit

- name: Git Checkout

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

with:

fetch-depth: 2

- name: Set up Node.js

uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0

with:

node-version-file: '.nvmrc'

cache: npm

- name: Install NPM packages

run: npm ci

- name: Setup GitHub Pages

uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0

- name: Restore Cache

uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0

with:

path: .next/cache

key: build-${{ hashFiles('**/package-lock.json') }}

restore-keys: |

build-${{ hashFiles('**/package-lock.json') }}

enableCrossOsArchive: true

- name: Build Next.js

run: node --run build

- name: Save Cache

uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0

with:

path: .next/cache

key: build-${{ hashFiles('**/package-lock.json') }}

enableCrossOsArchive: true

- name: Upload Artifact

uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0

with:

path: ./out # next.js build output

deploy:

name: Deploy to GitHub Pages

runs-on: ubuntu-latest

needs: build

environment:

name: github-pages

url: ${{ steps.deployment.outputs.page_url }}

steps:

- name: Harden the runner (Audit all outbound calls)

uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4

with:

egress-policy: audit

- name: Deploy to GitHub Pages

id: deployment

uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0