Create workflows

[imangh32676-sketch]

Summary by cubic

Adds a GitHub Actions workflow to deploy our app to Fastly on pushes to main and on manual runs. It sets up Node 20, installs deps with npm ci, and deploys via fastly/compute-actions@v5 (creates the service if missing).

• Migration
  • Add repo secret FASTLY_API_TOKEN with a Fastly token that can deploy Compute services.

^{Written for commit 07e1611. Summary will update on new commits.}

[cubic-dev-ai]

1 issue found across 1 file

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="workflows">

<violation number="1" location="workflows:12">
P1: Deployment workflow uses unpinned GitHub Actions tags instead of commit SHAs, increasing CI/CD supply-chain risk.</violation>
</file>

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>

[cubic-dev-ai]

P1: Deployment workflow uses unpinned GitHub Actions tags instead of commit SHAs, increasing CI/CD supply-chain risk.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At workflows, line 12:

<comment>Deployment workflow uses unpinned GitHub Actions tags instead of commit SHAs, increasing CI/CD supply-chain risk.</comment>

<file context>
@@ -0,0 +1,27 @@
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
</file context>