archived-pie/.github/workflows/docs.yml

name: "Publish Documentation microsite"

on:
  push:
    branches: ["*.*.x"]

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

permissions:
  contents: read

# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
concurrency:
  group: "pages"
  cancel-in-progress: false

jobs:
  build-assets:
    if: github.ref_name == github.event.repository.default_branch
    # See build-assets.yml for a list of the permissions and why they are needed
    permissions:
      contents: read
      id-token: write
      attestations: write
    uses: ./.github/workflows/build-assets.yml

  build-docs-package:
    if: github.ref_name == github.event.repository.default_branch
    runs-on: ubuntu-latest
    needs:
      - build-assets
    steps:
      - name: Checkout
        uses: actions/checkout@v6
      - name: Build documentation
        run: .github/docs/build-docs.sh
      - name: Fetch built PHAR from artifacts
        uses: actions/download-artifact@v8
        with:
          name: pie-${{ github.sha }}.phar
      - name: Fetch the executable PIEs from artifacts
        uses: actions/download-artifact@v8
        with:
          path: executable-pie-binaries
          pattern: pie-${{ github.sha }}-*.bin
          merge-multiple: true
      - name: Verify the PHAR and binaries
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          gh attestation verify pie.phar --repo ${{ github.repository }} ;
          find executable-pie-binaries -type f -exec gh attestation verify {} --repo ${{ github.repository }} \;
      - name: Copy PHAR into docs
        run: cp pie.phar docs-package/pie-nightly.phar
      - name: Copy executables into docs
        run: cp executable-pie-binaries/* docs-package/
      - name: Upload artifact
        uses: actions/upload-pages-artifact@v4
        with:
          path: docs-package

  deploy:
    if: github.ref_name == github.event.repository.default_branch
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}
    runs-on: ubuntu-latest
    needs: build-docs-package
    permissions:
      contents: read
      # pages:write is required to deploy to GitHub pages.
      pages: write
      # id-token:write is required to deploy to GitHub pages.
      id-token: write
    steps:
      - name: Deploy to GitHub Pages
        id: deployment
        uses: actions/deploy-pages@v4