ci: use commit hash for github action, add persist-credentials false … #580

	---
	# yamllint disable rule:line-length
	name: Test converting README.md to README.html
	on: # yamllint disable-line rule:truthy
	pull_request:
	merge_group:
	branches:
	- main
	types:
	- checks_requested
	push:
	branches:
	- main
	permissions:
	contents: read
	jobs:
	test_converting_readme:
	if: \|
	!((github.event_name == 'pull_request' && contains(github.event.pull_request.title, '[citest_skip]')) \|\|
	(github.event_name == 'push' && contains(github.event.head_commit.message, '[citest_skip]')))
	runs-on: ubuntu-latest
	permissions:
	contents: write
	steps:
	- name: Update pip, git
	run: \|
	set -euxo pipefail
	sudo apt update
	sudo apt install -y git

	- name: Check out code
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
	with:
	persist-credentials: false

	- name: Remove badges from README.md prior to converting to HTML
	run: sed -i '1,8 {/^\[\!.*actions\/workflows/d}' README.md

	- name: Convert README.md to HTML
	uses: docker://pandoc/core:latest
	with:
	args: >-
	--from gfm --to html5 --toc --shift-heading-level-by=-1
	--template .pandoc_template.html5
	--output README.html README.md

	- name: Upload README.html as an artifact
	uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
	with:
	name: README.html
	path: README.html

Navigation Menu