Skip to content

ci: gate blog publishing on reviewed pull requests - #1

Merged
cadywang merged 1 commit into
mainfrom
ci/publish-review-gate
Oct 15, 2026
Merged

cadywang merged 1 commit into
mainfrom
ci/publish-review-gate

Conversation

@cadywang

Copy link
Copy Markdown
Owner

Nothing can reach the published site without a pull request that passed the new review checks.

  • review-gate.yml: validate-posts (front matter, file name, local assets) and pr-checklist (the pull request checklist must be filled in) run on every pull request and on main
  • deploy.yml: publish-gate refuses to deploy a commit that does not come from a merged pull request, and optionally requires an approval from someone other than the author
  • add CODEOWNERS, a pull request template and REVIEW_POLICY.md
  • tools: check-posts.mjs and check-pr.mjs, plus npm run check:posts

Source commits land on main first and are only validated there. The
site is built and deployed only when a human explicitly triggers the
publish workflow, so a push alone can never go live.

- review-gate.yml: validate-posts, pr-checklist and build-check run
  on pull requests and on main, and never deploy anything
- deploy.yml: publish on workflow_dispatch or a publish-* tag, with a
  verify step that refuses commits which are not on main, a full post
  validation before the build, and a publish summary in the run
- tools/publish-summary.mjs: list the commits and the post titles that
  the pending publish would contain
- tools/check-posts.mjs, tools/check-pr.mjs: dependency free checks
  used by both workflows, plus npm run check:posts locally
- add CODEOWNERS, a pull request template and REVIEW_POLICY.md, and
  rewrite the README publishing flow for the solo review model
@cadywang
cadywang force-pushed the ci/publish-review-gate branch from a2fbfbc to 115bc0b Compare October 15, 2026 05:08
@cadywang
cadywang marked this pull request as ready for review October 15, 2026 05:31
@cadywang
cadywang merged commit e4d9567 into main Oct 15, 2026
2 of 3 checks passed
@cadywang
cadywang deleted the ci/publish-review-gate branch October 15, 2026 05:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant