1
Cloudflare Pages  负责：这份源码能不能构建成一个能用的站点
2
GitHub Actions    负责：这份源码本身写对了没有

1
name: Astro Check
2
on:
3
  push:
4
    branches: [main]
5
  pull_request:
6
    branches: [main]
7

8
concurrency:
9
  group: ${{ github.workflow }}-${{ github.ref }}
10
  cancel-in-progress: true      # 连推多次时取消旧的，省 Actions 分钟数
11

12
permissions:
13
  contents: read                # 最小权限，默认 token 权限更大
14

15
jobs:
16
  check:
17
    runs-on: ubuntu-latest
18
    steps:
19
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
20
      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
21
        with:
22
          node-version: 22
23
      - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
24
        with:
25
          run_install: false
26
      - run: pnpm install --frozen-lockfile
27
      - run: pnpm astro check

1
# ❌ 别人改了 tag 指向，你下次构建跑的就是新代码
2
uses: actions/checkout@v4
3

4
# ✅ 供应链攻击改不了你的构建产物
5
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

1
name: Code quality
2
jobs:
3
  quality:
4
    runs-on: ubuntu-latest
5
    steps:
6
      - uses: actions/checkout@11bd71...
7
      - uses: biomejs/setup-biome@f382a98e582959e6aaac8e5f8b17b31749018780 # v2.5.0
8
        with:
9
          version: latest
10
      - run: biome ci ./src --reporter=github

1
name: IndexNow
2
on:
3
  push:
4
    branches: [main]
5
  workflow_dispatch:
6

7
jobs:
8
  submit:
9
    runs-on: ubuntu-latest
10
    steps:
11
      - uses: actions/checkout@11bd71...
12

13
      # ① 等 Pages 把新版本部署上去
14
      - name: Wait for the new Pages deployment to go live
15
        run: |
16
          set -u
17
          SITE="https://ycxdev.com"
18
          for i in $(seq 1 30); do
19
            if curl -fsS "$SITE/robots.txt" | grep -q "Sitemap"; then
20
              echo "Site is serving: $SITE"
21
              exit 0
22
            fi
23
            echo "waiting for deployment... ($i/30)"
24
            sleep 10
25
          done
26
          echo "Site did not come up in time, continuing anyway"
27

28
      # ② 推送
29
      - name: Submit URLs to IndexNow
30
        continue-on-error: true      # 推送失败不该让 CI 变红
31
        run: |
32
          URLS=$(curl -fsS "$SITE/sitemap-0.xml" \
33
            | grep -o '<loc>[^<]*</loc>' | sed -e 's|<loc>||' -e 's|</loc>||' \
34
            | head -100 | jq -R . | jq -s .)
35

36
          jq -n --arg host "ycxdev.com" \
37
                --arg key "$KEY" \
38
                --arg keyLocation "$SITE/$KEY.txt" \
39
                --argjson urlList "$URLS" \
40
            '{host:$host,key:$key,keyLocation:$keyLocation,urlList:$urlList}' > payload.json
41

42
          curl -sS -X POST "https://api.indexnow.org/indexnow" \
43
            -H "Content-Type: application/json; charset=utf-8" \
44
            --data-binary @payload.json

1
version: 2
2
updates:
3
  - package-ecosystem: "npm"
4
    directory: "/"
5
    schedule:
6
      interval: "daily"
7
    groups:
8
      patch-updates:
9
        patterns: ["*"]
10
        update-types: ["patch"]
11
      minor-updates:
12
        patterns: ["*"]
13
        update-types: ["minor"]
14
    ignore:
15
      - dependency-name: "*"
16
        update-types: ["version-update:semver-major"]