tools: use the read-only token when filtering PRs in CQ #66036

	name: Test and upload documentation to artifacts

	on:
	pull_request:
	types: [opened, synchronize, reopened, ready_for_review]
	push:
	branches:
	- main
	- v[0-9]+.x-staging
	- v[0-9]+.x

	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true

	env:
	NODE_VERSION: lts/*

	permissions:
	contents: read

	jobs:
	build-docs:
	if: github.event.pull_request.draft == false
	runs-on: ubuntu-slim
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Use Node.js ${{ env.NODE_VERSION }}
	uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
	with:
	node-version: ${{ env.NODE_VERSION }}
	- name: Build
	run: NODE=$(command -v node) make doc-only
	- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
	with:
	name: docs
	path: out/doc
	- name: Test
	run: NODE=$(command -v node) make test-doc-ci TEST_CI_ARGS="-p actions --measure-flakiness 9"

Navigation Menu