Potential fix for code scanning alert no. 18: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: slashburygin

.github/workflows/docs.yml

@@ -0,0 +1,55 @@
+name: Build GitHub Pages
+on:
+  push:
+    branches:
+      - master
+    paths:
+      - 'docs/**'
+      - mkdocs.yml
+  workflow_dispatch:
+permissions:
+  contents: write
+  pages: write
+  id-token: write
+
+jobs:
+  build_mkdocs:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@v5
+        with:
+          python-version: 3.12
+      - name: Install requirements
+        run: sudo apt update && sudo apt install --yes libev-dev
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+      - name: Install tox-uv
+        run: uv tool install tox --with tox-uv
+      - name: Deploy docs to GitHub Pages
+        run: tox -e docs-deploy
+
+  deploy_mkdocs:
+    needs: build_mkdocs
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: gh-pages
+      - name: Setup Pages
+        uses: actions/configure-pages@v5
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: '.'
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4

.github/workflows/markdownlint.yml

@@ -1,7 +1,13 @@
 name: Markdown Lint
 description: Lint Markdown files
 
-on: [push, pull_request]
+on:
+  push:
+    branches:
+      - master
+    paths:
+      - 'docs/**'
+      - mkdocs.yml
 
 jobs:
   lint:
@@ -19,4 +25,4 @@ jobs:
       if: steps.changed-files.outputs.any_changed == 'true'
       with:
         globs: ${{ steps.changed-files.outputs.all_changed_files }}
-        separator: ","
+        separator: ","

.markdownlint.yaml

@@ -78,8 +78,8 @@ MD029:
 MD030:
   ul_single: 1
   ol_single: 1
-  ul_multi: 3
-  ol_multi: 2
+  ul_multi: 1
+  ol_multi: 1
 
 # MD031/blanks-around-fences : Fenced code blocks should be surrounded by blank lines : https://github.com/DavidAnson/markdownlint/blob/v0.33.0/doc/md031.md
 MD031: true

docs/element_manager/service.md

@@ -80,9 +80,9 @@ The main service entity that manages:
 
 Services can define dependencies that run before or after the main service:
 
--   **CmdShell**: Execute a shell command
+- **CmdShell**: Execute a shell command
     - `command`: The shell command to execute
--   **ServiceTarget** (TBD): Reference another service for ordering (currently disabled, service relationships are being reworked)
+- **ServiceTarget** (TBD): Reference another service for ordering (currently disabled, service relationships are being reworked)
 
 ## API Structure
 

docs/faq.md

@@ -72,13 +72,13 @@ export HS256_KEY="secret"
 ## 🔗 Related projects
 
 - Genesis SDK is a set of tools for developing Genesis elements. You can find it [here](https://github.com/infraguys/gcl_sdk).
-- Genesis DevTools it's a set oftools to manager life cycle of genesis projects. You can find it [here](https://github.com/infraguys/genesis_devtools).
+- Genesis DevTools it's a set of tools to manager life cycle of genesis projects. You can find it [here](https://github.com/infraguys/genesis_devtools).
 
 ## 💡 Contributing
 
 Contributing to the project is highly appreciated! However, some rules should be followed for successful inclusion of new changes in the project:
 
 - All changes should be done in a separate branch.
 - Changes should include not only new functionality or bug fixes, but also tests for the new code.
-- After the changes are completed and **tested**, a Pull Request should be created with a clear description of the new functionality. And add one of the project maintainers as a reviewer.
+- After the changes are completed and **tested**, a Pull Request should be created with a clear description of the new functionality. Add one of the project maintainers as a reviewer.
 - Changes can be merged only after receiving an approve from one of the project maintainers.

docs/index.md

@@ -50,9 +50,9 @@ The Load Balancer service provides a REST-based API for creating and managing lo
 
 The main load balancer entity that manages:
 
--   Status (NEW, IN_PROGRESS, ACTIVE, ERROR)
--   IP addresses
--   Type configuration:
+- Status (NEW, IN_PROGRESS, ACTIVE, ERROR)
+- IP addresses
+- Type configuration:
     - `core` - VM-based LB
     - `core_agent` - LB will be run on genesis_core instance itself
 
@@ -77,24 +77,24 @@ Backend pool that manages:
 
 Routing rules that define how traffic is handled:
 
--   Condition types
+- Condition types
     - `prefix` - nginx-like regex prefixes
     - `exact` - plain equal rule
     - `regex` - nginx-like regex
     - `raw` - used to set backend pools for L4
--   Actions
+- Actions
     - `backend` - send to backend
     - `redirect` - return http redirect
     - `local_dir` - serve static from local dir on LB
     - `local_dir_download` - download tar.gz/zstd on LB itself, unpack it and serve data from local dir
--   Modifiers (headers, rewrite rules)
-    -   `headers` - modify headers
-        -   `auto_header`:
+- Modifiers (headers, rewrite rules)
+    - `headers` - modify headers
+        - `auto_header`:
             - X-Forwarded-For
             - X-Forwarded-Port
             - X-Forwarded-Proto
             - X-Forwarded-Prefix
-        -   `set_header`: set static header
+        - `set_header`: set static header
 
 ## API Structure
 
@@ -136,10 +136,12 @@ Routing rules that define how traffic is handled:
 ```
 
 #### External sources requirements
+
 ##### SSH
 
 Tested on Ubuntu 24, prepare remote system:
-```
+
+```console
 # We may use nginx with proxy_protocol and socat for udp
 apt install nginx-full socat
 
@@ -148,7 +150,6 @@ echo 'net.ipv4.ip_unprivileged_port_start=0' > /etc/sysctl.d/50-unprivileged-por
 sysctl --system
 ```
 
-
 ### Creating a Backend Pool
 
 ```json

docs/network/load_balancer.md

@@ -69,11 +69,8 @@ markdown_extensions:
       alternate_style: true
 
 nav:
-  - Software:
-    - Общее: index.md
-    - Лендинг: onepager.md
+  - Software: index.md
   - Network:
     - Load Balancer as a Service API: network/load_balancer.md
   - Service:
     - Service as a Service API: element_manager/service.md
-  - FAQ: faq.md

docs/onepager.md

@@ -59,6 +59,12 @@ extras =
 runner = uv-venv-lock-runner
 commands = mkdocs serve --dev-addr 0.0.0.0:8181 --livereload
 
+[testenv:docs-deploy]
+extras =
+  docs
+runner = uv-venv-lock-runner
+commands = mkdocs gh-deploy --force
+
 [testenv:develop]
 runner = uv-venv-lock-runner
 extras =