@EdTheDev@infosec.exchange So I suppose the main part I see missing from your write up is documentation around when/how your build pipeline is fired - looks like it's on push as a github pipeline? It's interesting to see a ps1 file in the pipeline - does that run on the ubuntu image? My site is an SSG built using Astro.js with WP acting purely as an API atm. I used to use eleventy, but I found the composability of asto components a little more convenient. (Source code: https://gitlab.com/Gaffenomicon/gaffen-astro)