Skip to content
Documentation

fix(docs): pass secrets to the reusable documentation workflow #22

Sign in to view logs

fix(docs): pass secrets to the reusable documentation workflow

fix(docs): pass secrets to the reusable documentation workflow #22

Workflow file for this run

.github/workflows/documentation.yml at f1e50ea
name: Documentation
on:
push:
branches: [development]
pull_request:
branches: [development]
jobs:
deploy:
uses: ConductionNL/.github/.github/workflows/documentation.yml@main
# A called workflow receives NO secrets from its caller unless they are
# passed explicitly or inherited — `with:` carries inputs, never secrets.
# Without this line `secrets.CF_API_TOKEN` is EMPTY inside the callee, so
# its "Publish to the Cloudflare Worker" step skips itself on its own
# guard and the run finishes GREEN having written only gh-pages, which
# nothing serves. The live site never changes and no check goes red to
# say so — the exact failure mode the pinned inputs below guard against,
# arriving one layer earlier.
secrets: inherit
with:
# `keepiq.conduction.nl` resolves as of 2026-08-23 — attached as a second
# custom domain on the SAME `doriath-docs` worker that serves
# `doriath.conduction.nl`. Both hosts answer, so nothing goes dark either
# way. docs-hosts must list BOTH: wrangler reconciles the worker's
# triggers against it, so a host omitted there is removed. Keep this in
# step with docs/static/CNAME.
cname: keepiq.conduction.nl
docs-hosts: doriath.conduction.nl,keepiq.conduction.nl
# Named explicitly, because the comment above already knows the answer
# and the workflow did not. The callee derives the worker from `cname`
# when not told — `keepiq-docs`, which does not exist. Deploying that
# creates a SECOND worker while both custom domains keep routing to
# `doriath-docs`: every deploy green, reaching nobody. Renaming the
# worker is a Cloudflare-side move, not something this file can perform.
worker-name: doriath-docs