Daily AI Security Digest #16
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Daily AI Security Digest | |
| on: | |
| schedule: | |
| # 毎日 8:00 JST (23:00 UTC 前日) | |
| - cron: "0 23 * * *" | |
| workflow_dispatch: | |
| permissions: | |
| contents: write | |
| issues: write | |
| pages: write | |
| id-token: write | |
| jobs: | |
| # Step 1: GitHub IssueからURLを抽出 | |
| process-picks: | |
| uses: ./.github/workflows/process-picks.yml | |
| # Step 2: ダイジェスト生成 → public/rss/ に出力 | |
| build-digest: | |
| needs: process-picks | |
| runs-on: ubuntu-latest | |
| outputs: | |
| changed: ${{ steps.commit.outputs.changed }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| ref: master | |
| - name: Download issue picks | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: issue-picks | |
| path: .issue_picks/ | |
| continue-on-error: true | |
| - name: Install uv | |
| uses: astral-sh/setup-uv@v5 | |
| - name: Generate digest | |
| env: | |
| ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} | |
| run: uv run scripts/fetch_digest.py | |
| - name: Commit digest files | |
| id: commit | |
| run: | | |
| git config user.name "github-actions[bot]" | |
| git config user.email "github-actions[bot]@users.noreply.github.com" | |
| git add public/rss/ public/rss/archives/ scripts/archive/ manual_picks.yaml | |
| if git diff --staged --quiet; then | |
| echo "changed=false" >> "$GITHUB_OUTPUT" | |
| else | |
| git commit -m "digest: $(date +%Y-%m-%d)" | |
| git push | |
| echo "changed=true" >> "$GITHUB_OUTPUT" | |
| fi | |
| # Step 3: 変更があればデプロイ | |
| deploy: | |
| needs: build-digest | |
| if: needs.build-digest.outputs.changed == 'true' | |
| uses: ./.github/workflows/deploy.yml |