feat(blog): blog post--lessons learned on publish security #1307

	name: Build and Jekyll site and run htmlproofer

	on:
	pull_request:
	push:
	branches:
	- main

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	build-site:
	runs-on: ubuntu-latest
	steps:
	- name: Check out the code
	uses: actions/checkout@v4

	- name: Fetch main
	run: \|
	git fetch origin main --depth 1
	git branch

	- name: Setup Ruby
	uses: ruby/setup-ruby@v1
	with:
	bundler-cache: true # runs 'bundle install' and caches installed gems automatically

	- name: Build with Jekyll
	run: bundle exec jekyll build
	env:
	JEKYLL_ENV: production

	- name: Check links with lychee
	id: lychee
	uses: lycheeverse/lychee-action@v2.1.0
	with:
	fail: true
	args: --verbose --no-progress _site/*.html
	env:
	GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

	- name: Check HTML using htmlproofer
	uses: chabad360/htmlproofer@v2
	with:
	directory: "_site"
	arguments: \|
	--ignore-files "/.+\/_posts\/README.md"
	--checks "Images,Scripts"

Provide feedback