Daily AI Security Digest #159

	name: Daily AI Security Digest

	on:
	schedule:
	# 毎日 8:00 JST (23:00 UTC 前日)
	- cron: "0 23 * * *"
	workflow_dispatch:

	permissions:
	contents: write
	issues: write
	pages: write
	id-token: write

	jobs:
	# Step 1: GitHub IssueからURLを抽出
	process-picks:
	uses: ./.github/workflows/process-picks.yml

	# Step 2: ダイジェスト生成 → public/rss/ に出力
	build-digest:
	needs: process-picks
	runs-on: ubuntu-latest
	outputs:
	changed: ${{ steps.commit.outputs.changed }}
	steps:
	- uses: actions/checkout@v4
	with:
	ref: master

	- name: Download issue picks
	uses: actions/download-artifact@v4
	with:
	name: issue-picks
	path: .issue_picks/
	continue-on-error: true

	- name: Install uv
	uses: astral-sh/setup-uv@v5

	- name: Generate digest
	env:
	ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
	run: uv run scripts/fetch_digest.py

	- name: Commit digest files
	id: commit
	run: \|
	git config user.name "github-actions[bot]"
	git config user.email "github-actions[bot]@users.noreply.github.com"
	git add public/rss/ public/rss/archives/ scripts/archive/ manual_picks.yaml
	if git diff --staged --quiet; then
	echo "changed=false" >> "$GITHUB_OUTPUT"
	else
	git commit -m "digest: $(date +%Y-%m-%d)"
	git push
	echo "changed=true" >> "$GITHUB_OUTPUT"
	fi

	# Step 3: 変更があればデプロイ
	deploy:
	needs: build-digest
	if: needs.build-digest.outputs.changed == 'true'
	uses: ./.github/workflows/deploy.yml

Navigation Menu