build.yml

# This is a basic workflow to help you get started with Actions

name: Build

# Controls when the action will run. Triggers the workflow on push or pull request
# events but only for the master branch
on:
  pull_request:
    branches: [ master ]


jobs:
  build:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - name: Build Hugo
      run: |
        mkdir html
        ./bin/hugo -d html -v
  detectsecrets:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - name: Set up Python
      uses: actions/setup-python/@v5
      with:
        python-version: 3.11
    - name: Install Detect Secrets
      run: |
        python -m pip install --upgrade pip
        pip install --upgrade "git+https://github.com/ibm/detect-secrets.git@master#egg=detect-secrets"
    - name: Detect Secrets
      run: |
        detect-secrets scan --update .secrets.baseline
        detect-secrets audit .secrets.baseline --report --fail-on-unaudited --omit-instructions