Informasjonsforvaltning / Informasjonsforvaltning/workflows

Long-term: migrate from peaceiris/actions-gh-pages to actions/deploy-pages

Open
#229 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
0
Forks
2
Avg merge
5d 14h
Merged PRs (30d)
5

Description

## Summary
`peaceiris/actions-gh-pages` is currently used to publish to GitHub Pages. It works fine and is actively maintained, but:
- It is a single-maintainer action (5.3k stars, well-known but not GitHub-verified).
- Last release was 2024-04-08 — over 2 years between releases despite recent commit activity.
- It receives `GH_TOKEN` and writes to the `gh-pages` branch.

## Suggested direction
GitHub now provides first-party actions for this purpose:
- `actions/upload-pages-artifact`
- `actions/deploy-pages`

These use the modern Pages deployment API rather than pushing to a `gh-pages` branch, which is the path GitHub itself recommends.

## Scope
Used in `specification-github-pages.yaml` (and possibly elsewhere — check with `grep -l peaceiris .github/workflows/`).

## Why "long-term"
Not urgent — current usage is fine. This is a strategic migration to reduce reliance on individual-maintainer actions and align with GitHub's recommended path. Bundle with the next significant change to the spec-publishing flow.

## Context
Surfaced during a security audit of third-party actions. Tagged Medium risk; logged as a slow-burn improvement.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.