CI: Harden GHA configuration #277

	name: CI

	on: [push, pull_request]

	jobs:
	build:
	runs-on: ubuntu-latest
	permissions:
	contents: write

	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false
	- name: Install Python dependencies
	run: pip install -r requirements.txt
	- name: Build
	run: make -Cdocs html
	- name: remove inventory
	run: rm ./docs/_build/html/objects.inv
	- name: Publish
	if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
	uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
	with:
	github_token: ${{ secrets.GITHUB_TOKEN }}
	publish_dir: ./docs/_build/html
	force_orphan: true

Provide feedback