ensure no git directory is exposed

Author: betolink

.github/workflows/deploy-website.yml

@@ -16,6 +16,13 @@ jobs:
         with:
           ref: jpl
 
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: us-west-2
+
       - name: Sync to S3
         uses: jakejarvis/s3-sync-action@master
         with:
@@ -24,6 +31,8 @@ jobs:
           AWS_S3_BUCKET: ${{ secrets.S3_BUCKET }}
           AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
           AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          AWS_REGION: 'us-west-2'
-          SOURCE_DIR: '.'  # or 'public' or whatever the root is
+          AWS_REGION: "us-west-2"
+          SOURCE_DIR: "." # or 'public' or whatever the root is
 
+      - name: Remove .git directory from S3
+        run: aws s3 rm s3://${{ secrets.S3_BUCKET }}/.git --recursive