我的博客自动化流程

name: 博客打包任务

# 代码 push 到 master 分支的时候运行该 workflow
# TODO：不运行 commit 信息中包含特定关键词的 push
on:
  push:
    branches: [ master ]

jobs:
  Build:
    runs-on: ubuntu-latest

    steps:
      - name: 检出分支
        uses: actions/checkout@v2
        with:
          persist-credentials: fasle # false 是用 personal token，true 是使用 GitHub token
          fetch-depth: 0 # 保证能够 push 成功

      # 设置 ruby 环境
      - name: 设置 Ruby 环境
        uses: ruby/setup-ruby@v1
        with:
          bundler-cache: true
          ruby-version: 2.6

      # 安装依赖
      - name: bundle 安装依赖
        run: bundle install

      # 打包静态资源
      - name: 构建 xheldon.com 页面
        if: ${{ startsWith(github.event.head_commit.message, 'com') || startsWith(github.event.head_commit.message, 'all') }}
        run: bundle exec jekyll build

      - name: xheldon.com 写入信息
        if: ${{ hashFiles('./_site') }}
        working-directory: ./_site
        run: |
            echo "www.xheldon.com" > CNAME
            echo -e "# [Xheldon's blog](https://www.xheldon.com)" > README.md

      - name: 推送到 x_blog 仓库
        if: ${{ hashFiles('./_site') }}
        working-directory: ./_site
        run: |
          pwd
          git init
          git checkout -b master
          git add -A
          git -c user.name='github actions by ${{github.actor}}' -c user.email='NO' commit -m '${{github.event.head_commit.message}}'
          git push "https://${{github.actor}}:${{secrets.X_BLOG_SITE}}@github.com/Xheldon/x_blog.git" HEAD:master -f -q

      - name: 构建 xheldon.cn 页面
        if: ${{ startsWith(github.event.head_commit.message, 'cn') || startsWith(github.event.head_commit.message, 'all') }}
        run: bundle exec jekyll build --config=_config.cn.yml -d _site_cn

      # gitee 和 github 的用户名一样
      - name: 推送到 x_blog_cn 仓库
        if: ${{ hashFiles('./_site_cn') }}
        working-directory: ./_site_cn
        run: |
          pwd
          git init
          git checkout -b master
          git add -A
          git -c user.name='gitub actions by ${{github.actor}} push to gitee' -c user.email='NO' commit -m '${{github.event.head_commit.message}}'
          git push "https://${{github.actor}}:${{secrets.X_BLOG_SITE_CN}}@gitee.com/Xheldon/x_blog_cn.git"  HEAD:master -f -q

app.post('/hooks_cn_push', async (req, res) => {
    // Note: 收到 x_blog_cn 的 webhooks, 执行 git pull, 将 x_blog_cn 拉取到 public 目录
    // Note: 签名验证，暂时略
    // Note: 拉取分支
    const branch = req.body.repository.clone_url;
    const headers = req.headers;
    console.log('headers:', headers);
    // Note: 验证一下 header 的合法性
    if (
        headers['x-gitee-event'] === 'Push Hook'
            && headers['x-gitee-token'] === GITEE_WEBHOOKS_SECRET
    ) {
        exec(`sudo rm -rf ./_public && sudo git clone ${branch} ./_public && sudo rsync -chir --delete ./_public/ ./public/ && sudo rm -rf ./_public`, {
            cwd: './',

        }, (err, stdout, stderr) => {
            if (err) {
                console.log('err:', err, stderr);
                res.status(400).send({
                    msg: '服务器内部 git clone 仓库失败:',
                    stderr,
                    stdout,
                    err,
                })
            } else {
                // Note: stdout 没有任何输出表示正常
                console.log('out:', stdout);
                if (!stdout) {
                    res.json({
                        msg: '没问题',
                        status: 200,
                        stderr,
                        stdout,
                        err,
                    });
                } else {
                    res.json({
                        msg: 'git clone 的时候返回了一些内容，请过目',
                        status: 200,
                        stderr,
                        stdout,
                        err,
                    });
                }
            }
        });
    } else {
        res.json({
            msg: '恶意请求！',
            status: 403
        });
    }
});

name: 腾讯云 cos 同步任务

# 代码 push 到本仓库的时候触发该 ci
# 分析提交的 commits（不只是 head commit），将全部的 added modify 归结到一起（去重）调用上传方法
#  将 delete 的，调用删除方法
on:
  push:
    branches: [master]

jobs:
  CheckOutAndUpload:
    runs-on: ubuntu-latest

    steps:
      - name: 检出分支
        uses: actions/checkout@v2
        with:
          persist-credentials: false
          fetch-depth: 0

      - name: 设置 node 环境
        uses: actions/setup-node@v2.4.1
        with:
          node-version: 14.x
          architecture: x64
          cache: npm

      - name: 安装依赖
        run: npm i

      - name: 运行上传脚本
        uses: actions/github-script@v5
        env:
          COS_SECRET_ID: ${{secrets.COS_SECRET_ID}}
          COS_SECRET_KEY: ${{secrets.COS_SECRET_KEY}}
          COS_BUCKET: ${{secrets.COS_BUCKET}}
          COS_REGION: ${{secrets.COS_REGION}}
        with:
          script: |
            const script = require('./upload.js')
            await script({github, context, core})