feat(sandbox): add Wasmtime WASM sandbox, Docker hardening, generic f… #64

	name: Deploy Documentation

	on:
	push:
	branches: [main]
	paths:
	- 'docs/**'
	- '.github/workflows/docs.yml'
	workflow_dispatch:

	permissions: {}

	concurrency:
	group: pages
	cancel-in-progress: false

	jobs:
	zizmor:
	name: Workflow Security
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
	with:
	persist-credentials: false
	- uses: zizmorcore/zizmor-action@135698455da5c3b3e55f73f4419e481ab68cdd95 # v0.4.1
	with:
	advanced-security: false
	online-audits: false

	deploy:
	needs: zizmor
	runs-on: ubuntu-latest
	permissions:
	contents: write
	steps:
	- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
	with:
	persist-credentials: false

	- name: Install mdBook
	run: \|
	mkdir -p $HOME/.local/bin
	curl -sSL https://github.com/rust-lang/mdBook/releases/download/v0.4.52/mdbook-v0.4.52-x86_64-unknown-linux-gnu.tar.gz \| tar -xz -C $HOME/.local/bin
	echo "$HOME/.local/bin" >> $GITHUB_PATH

	- name: Install mdbook-admonish
	run: \|
	curl -sSL https://github.com/tommilligan/mdbook-admonish/releases/download/v1.20.0/mdbook-admonish-v1.20.0-x86_64-unknown-linux-gnu.tar.gz \| tar -xz -C $HOME/.local/bin

	- name: Build documentation
	working-directory: docs
	run: mdbook build

	- name: Add CNAME for custom domain
	run: echo "docs.moltis.org" > docs/book/CNAME

	- name: Deploy to gh-pages branch
	uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4
	with:
	github_token: ${{ secrets.GITHUB_TOKEN }}
	publish_dir: ./docs/book
	cname: docs.moltis.org

Navigation Menu