publish.yml

name: Publish site

on:
  push:
    branches:
      - main

defaults:
  run:
    shell: bash -el {0}

# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
permissions:
  contents: read
  pages: write
  id-token: write

jobs:
  build-site:
    name: Build
    runs-on: ubuntu-latest

    steps:
      - name: 🛒 Checkout
        uses: actions/checkout@v4

      - name: 🧚 Install pixi
        uses: prefix-dev/setup-pixi@v0.8.1
        with:
          pixi-version: v0.27.1
          environments: publish
          locked: true

      - name: Fetch site assets
        run: pixi run -e publish just fetch-web-assets
        env:
          AZURE_STORAGE_SAS_TOKEN: ${{secrets.AZURE_STORAGE_SAS_TOKEN}}

      - name: Render site content
        run: pixi run -e publish just render

      - name: Upload site artifact
        uses: actions/upload-artifact@v4
        with:
          name: codex-site
          path: _site

  deploy:
    name: Deploy site
    needs: [build-site]
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}
    runs-on: ubuntu-latest
    steps:
      - name: Setup Pages
        uses: actions/configure-pages@v5
      - name: Fetch site artifact
        uses: actions/download-artifact@v4
        with:
          name: codex-site
          path: .
      - name: Upload artifact
        uses: actions/upload-pages-artifact@v3
        with:
          # Upload entire repository
          path: .
      - name: Deploy to GitHub Pages
        id: deployment
        uses: actions/deploy-pages@v4