murk-cli 0.10.2

Encrypted secrets manager for developers — one file, age encryption, git-friendly
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87

name: Docs preview

# Deploys a Cloudflare Pages PREVIEW of the docs site for pull requests that
# touch it, then comments the preview URL on the PR. It uses the same Pages
# project as production (murk-docs); any branch other than the project's
# production branch is a Pages preview deployment with its own URL, so this
# never touches murk.interrupted.sh. Production deploys live in docs.yaml.
#
# The build always runs, so it doubles as a smoke check on every PR (forks
# included). The deploy and comment steps are skipped for pull requests from
# forks (which don't receive repo secrets), and skip cleanly (a green run, not
# a failure) until the Cloudflare secrets are configured.

on:
  pull_request:
    paths:
      - "docs-site/**"
      - "docs/cli-reference.md"
      - "docs/env-reference.md"
      - ".github/workflows/docs-preview.yaml"

permissions:
  contents: read
  pull-requests: write

# Per-PR: a new push supersedes the in-flight preview for the same PR.
concurrency:
  group: docs-preview-${{ github.event.pull_request.number }}
  cancel-in-progress: true

jobs:
  preview:
    name: Build & preview
    runs-on: ubuntu-latest
    env:
      # Referenced in step-level `if` so the deploy skips (rather than fails)
      # until the Cloudflare secrets exist.
      CF_CONFIGURED: ${{ secrets.CLOUDFLARE_API_TOKEN != '' && secrets.CLOUDFLARE_ACCOUNT_ID != '' }}
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: "22"
          cache: npm
          cache-dependency-path: docs-site/package-lock.json

      - name: Install dependencies
        working-directory: docs-site
        run: npm ci

      # prebuild runs sync-generated-docs.mjs before Astro builds.
      - name: Build site
        working-directory: docs-site
        run: npm run build

      - name: Deploy preview to Cloudflare Pages
        id: deploy
        if: ${{ env.CF_CONFIGURED == 'true' && github.event.pull_request.head.repo.full_name == github.repository }}
        uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4.0.0
        with:
          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
          workingDirectory: docs-site
          command: pages deploy dist --project-name=murk-docs --branch=pr-${{ github.event.pull_request.number }} --commit-dirty=true
        env:
          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}

      - name: Comment preview URL
        if: ${{ steps.deploy.outcome == 'success' }}
        env:
          GH_TOKEN: ${{ github.token }}
          PR: ${{ github.event.pull_request.number }}
          DEPLOY_URL: ${{ steps.deploy.outputs.deployment-url }}
          ALIAS_URL: ${{ steps.deploy.outputs.pages-deployment-alias-url }}
        run: |
          set -euo pipefail
          {
            echo "Docs preview for this PR:"
            echo
            echo "- Latest build: ${DEPLOY_URL}"
            if [ -n "${ALIAS_URL}" ]; then
              echo "- Stable alias: ${ALIAS_URL}"
            fi
            echo
            echo "_Updates on each push to this PR._"
          } > preview-comment.md
          gh pr comment "$PR" --body-file preview-comment.md --edit-last --create-if-none