remove env vars

And add environments and permissions

.env.template

@@ -0,0 +1,14 @@
+###############################################
+# Project environment variables               #
+# Uncomment the line to use and set the value #
+###############################################
+
+## Docker compose variables
+#DOCTOOLS_IMAGE_VERSION # Docker compose image. Default to 'latest'.
+
+## MkDocs variables
+#DEBUG=true # uncomment to output debug infos in HTML source code. Requires MINIFY=false
+#VERSION=1.2.3 # uncomment to force a version number on your local preview
+#LANGUAGE # Two letters language code. Default language is 'en'
+#PREBUILD_INDEX=false # uncomment to speedup your preview build (will slow down searches)
+#MINIFY=false # uncomment to prevent HTML/CSS/JS code to be minified. Useful for debug.

.github/workflows/latest_publish.yml

@@ -1,7 +1,6 @@
 ---
 name: Publish latest doc site
 
-# Controls when the action will run.
 on:
   push:
     branches: [main]
@@ -11,6 +10,9 @@ jobs:
   deploy:
     name: Build and publish latest site
     runs-on: ubuntu-latest
+    environment: production
+    permissions:
+      contents: read
     # secrets are not usable from outside ConsenSys org
     # The workflow will then be disabled for non ConsenSys repositories to prevent useless failure.
     # Restricting to refs/heads/main here to prevent workflow_dispatch to run on another branch
@@ -21,15 +23,6 @@ jobs:
         with:
           fetch-depth: 0 # Required for mkdocs to be able to display pages last update info
 
-      - name: set environment vars from .env file
-        uses: c-py/action-dotenv-to-setenv@a6380f4d905f42adb7c065db63e6d66d75b971ad #v3
-        with:
-          env-file: '.env'
-
-      - name: Set non empty LANGUAGE env
-        shell: sh
-        run: echo "LANGUAGE=${LANGUAGE:-en}" >> $GITHUB_ENV
-
       - name: Publish latest version to AWS
         uses: ConsenSys/doctools.action-builder/actions/latest-publish@main
         with:
@@ -39,4 +32,4 @@ jobs:
           AWS_REGION: ${{ secrets.AWS_REGION }}
           AWS_S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
           PROJECT: ${{ secrets.PROJECT }}
-          LANGUAGE: ${{ env.LANGUAGE }}
+          LANGUAGE: 'en'

.github/workflows/linkcheck.yml

@@ -7,6 +7,9 @@ jobs:
   links-check:
     name: Check links
     runs-on: ubuntu-latest
+    environment: no-secret
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
         uses: actions/checkout@v2

.github/workflows/lint.yml

@@ -7,6 +7,9 @@ jobs:
   lint:
     name: Lint Code Base
     runs-on: ubuntu-latest
+    environment: no-secret
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v2
         with:

.github/workflows/pr_preview_delete.yml

@@ -9,6 +9,11 @@ jobs:
   deploy:
     name: Remove PR preview from pages
     runs-on: ubuntu-latest
+    environment: no-secret
+    permissions:
+      contents: write
+      pull-requests: write
+
     steps:
       - name: 'checkout code from repos'
         uses: actions/checkout@v2

.github/workflows/pr_preview_publish.yml

@@ -1,30 +1,25 @@
 ---
 name: Publish PR preview
 
-# Controls when the action will run.
 on: [ pull_request_target ]
 
 jobs:
   deploy:
     name: Build and publish PR preview
     runs-on: ubuntu-latest
+    environment: preview
+    permissions:
+      contents: write
+      pull-requests: write
+
     steps:
       - name: checkout code from repos
         uses: actions/checkout@v2
         with:
           ref: refs/pull/${{ github.event.number }}/merge # required to pull the PR code instead of the main one
           fetch-depth: 0 # Required for mkdocs to be able to display pages last update info
 
-      - name: set environment vars from .env file
-        uses: c-py/action-dotenv-to-setenv@a6380f4d905f42adb7c065db63e6d66d75b971ad #v3
-        with:
-          env-file: '.env'
-
-      - name: Set non empty LANGUAGE env
-        shell: sh
-        run: echo "LANGUAGE=${LANGUAGE:-en}" >> $GITHUB_ENV
-
       - name: Build and publish PR preview
         uses: ConsenSys/doctools.action-builder/actions/pr-preview-publish@main
         with:
-          LANGUAGE: ${{ env.LANGUAGE }}
+          LANGUAGE: 'en' # we do not have any other languages for the moment, will update when needed

.github/workflows/release_publish.yml

@@ -10,6 +10,9 @@ jobs:
   deploy:
     name: Build and publish released site
     runs-on: ubuntu-latest
+    environment: production
+    permissions:
+      contents: read
     # secrets are not usable from outside ConsenSys org
     # The workflow will then be disabled for non ConsenSys repositories to prevent useless failure.
     if: github.event.repository.fork == false && github.repository_owner == 'ConsenSys'
@@ -19,15 +22,6 @@ jobs:
         with:
           fetch-depth: 0 # Required for mkdocs to be able to display pages last update info
 
-      - name: set environment vars from .env file
-        uses: c-py/action-dotenv-to-setenv@a6380f4d905f42adb7c065db63e6d66d75b971ad #v3
-        with:
-          env-file: '.env'
-
-      - name: Set non empty LANGUAGE env
-        shell: sh
-        run: echo "LANGUAGE=${LANGUAGE:-en}" >> $GITHUB_ENV
-
       - name: Publish release version to AWS
         uses: ConsenSys/doctools.action-builder/actions/release-publish@main
         with:
@@ -37,4 +31,4 @@ jobs:
           AWS_REGION: ${{ secrets.AWS_REGION }}
           AWS_S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }}
           PROJECT: ${{ secrets.PROJECT }}
-          LANGUAGE: ${{ env.LANGUAGE }}
+          LANGUAGE: 'en'

.github/workflows/spelling.yml

@@ -11,6 +11,9 @@ jobs:
   spelling:
     name: Vale
     runs-on: ubuntu-latest
+    environment: no-secret
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v2
       - name: create style dir

.gitignore

@@ -10,6 +10,7 @@ common/
 .doctools.action-builder
 docker-compose.dev.yml
 .env.dev
+.env
 __pycache__
 /.run/
 *.log