link-check.yml

name: link check

on:
  pull_request:
    branches: [main]
    paths:
      - 'README.md'
      - 'SECURITY.md'
      - 'docs/**/*.md'
      - 'src/content/**/*.md'
  schedule:
    - cron: '37 11 * * 2'
  workflow_dispatch:

permissions:
  contents: read

jobs:
  lychee:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

      - name: Check repository documentation links
        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2
        with:
          output: lychee/repository-documentation.md
          args: >-
            --no-progress
            --verbose
            --accept 200,204,206,301,302,303,307,308,403,429,999
            README.md
            SECURITY.md
            docs/**/*.md
          fail: true

      - name: Check public content links
        uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2
        with:
          output: lychee/public-content.md
          # Self-domain links are excluded: a PR that introduces a page and
          # links to it would 404 against live until it deploys. Internal
          # references are audited against the built output by publish-check
          # in CI; this step owns external links only.
          args: >-
            --no-progress
            --verbose
            --base-url https://jseverino.com
            --exclude '^https://jseverino\.com'
            --accept 200,204,206,301,302,303,307,308,403,429,999
            src/content/**/*.md
          fail: true

      - name: Upload link check reports
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        if: always()
        with:
          name: link-check-reports
          path: lychee
          if-no-files-found: ignore