Posts tagged with "ci-cd"

With the options narrowed down to a separate GitHub repo with Staticrypt, I started designing the actual implementation. That's when the interesting problems showed up — Giscus feedback, Staticrypt navigation quirks, leaky RSS feeds, and the question of whether a password even matters when the source is public.

I wanted a way to share unfinished blog posts with reviewers before publishing. Sounds simple — but GitHub Pages has no authentication, serves one site per repo, and my drafts are already in a public repository. Here's every option I considered and why most of them didn't survive.

Three GitHub Actions workflows, Dependabot, and a Lighthouse config — here's the full CI/CD pipeline that builds, deploys, secures, and monitors this Jekyll blog. Including the bugs I shipped along the way.

Dependabot misses Python pip security issues that pip-audit catches. Here's a GitHub Actions workflow that audits dependencies automatically without requiring pinned versions.