Skip to content

ci(deploy): Cloudflare deploy job runs in Environment production (main only) - #36

Merged
solsentry merged 1 commit into
mainfrom
ci/cloudflare-production-env
Oct 6, 2026
Merged

solsentry merged 1 commit into
mainfrom
ci/cloudflare-production-env

Conversation

@solsentry

Copy link
Copy Markdown
Owner

Branch ci/cloudflare-production-env (706e9cd).

  • The deploy job gets environment: production.
    • The Environment's deployment rule allows the main branch only.
    • CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID move from repo secrets to Environment secrets, so a workflow on any other branch cannot read them.
  • The build job, which also runs on PRs, is unchanged and uses no secret.

Order:

  1. Create the Environment and set its secrets.
  2. Merge, and check that the deploy is green.
  3. Delete the repo-level secrets.

@solsentry
solsentry merged commit d94d368 into main Oct 6, 2026
2 checks passed
@solsentry
solsentry deleted the ci/cloudflare-production-env branch October 6, 2026 03:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants