feat: independently publish server SSH keys with safe sync and Worker homepage

2026-10-12 23:33:56 +00:00 · 2026-10-12 23:11:42 +08:00
parent f37cb51e06
commit 5798bf8900
29 changed files with 4943 additions and 525 deletions
@@ -0,0 +1,37 @@
+name: Validate repository keys and clients
+on:
+  pull_request:
+  push:
+    branches: [main]
+permissions:
+  contents: read
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: '22'
+          cache: npm
+      - run: npm ci
+      - name: Install shell test interpreters
+        run: sudo apt-get update && sudo apt-get install -y busybox shellcheck
+      - name: Run unit, shell, and real-browser tests
+        run: npm test
+        env:
+          BROWSER_TESTS: '1'
+          BROWSER_ARTIFACTS_DIR: /tmp/quickly-browser-artifacts
+      - name: Build isolated test fixture (never deployed)
+        run: npm run build:test
+      - name: Validate Worker bundle without publishing
+        run: npx wrangler deploy --dry-run --config cf-worker/wrangler.toml --outdir /tmp/worker-dry-run
+      - name: Upload browser evidence
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: browser-evidence
+          path: /tmp/quickly-browser-artifacts
+          if-no-files-found: ignore
+          retention-days: 7