[{"data":1,"prerenderedAt":1932},["ShallowReactive",2],{"page:\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsubresource-integrity-for-third-party-assets":3,"all-docs-nav":1390},{"id":4,"title":5,"body":6,"breadcrumb":1366,"dateModified":1376,"datePublished":1376,"description":1377,"extension":1378,"faq":1379,"meta":1384,"navigation":591,"path":1385,"seo":1386,"slug":12,"stem":1387,"type":1388,"__hash__":1389},"content\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsubresource-integrity-for-third-party-assets\u002Findex.md","Subresource Integrity for Third-Party Assets",{"type":7,"value":8,"toc":1347},"minimark",[9,13,17,26,31,65,69,138,157,318,322,325,409,416,420,427,539,542,546,549,903,910,1013,1017,1020,1097,1185,1192,1196,1203,1207,1219,1223,1262,1266,1269,1273,1278,1281,1285,1288,1292,1295,1299,1302,1306,1343],[10,11,5],"h1",{"id":12},"subresource-integrity-for-third-party-assets",[14,15,16],"p",{},"In 2024, a widely embedded polyfill CDN changed ownership and began serving malicious code to the sites that loaded its script. Every one of those sites had done nothing wrong except trust that a URL would keep returning the same file. Subresource Integrity (SRI) removes that trust: you publish the hash of the file you expect, and the browser refuses to run anything else.",[14,18,19,20,25],{},"For static sites, SRI is one of two answers to the same question, and often the second-best one. This guide explains when SRI is the right tool, how to generate integrity hashes at build time so they never drift, and when self-hosting the file removes the need entirely. It is part of ",[21,22,24],"a",{"href":23},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002F","Security Headers and Hardening for Static Sites",".",[27,28,30],"h2",{"id":29},"prerequisites","Prerequisites",[32,33,34,47,62],"ul",{},[35,36,37,38,42,43,46],"li",{},"A list of every external ",[39,40,41],"code",{},"\u003Cscript>"," and ",[39,44,45],{},"\u003Clink rel=\"stylesheet\">"," your built pages load.",[35,48,49,50,53,54,57,58,61],{},"For each, whether its URL is versioned and immutable (",[39,51,52],{},"\u002Fnpm\u002Fkatex@0.16.11\u002Fdist\u002Fkatex.min.css",") or mutable (",[39,55,56],{},"\u002Flatest\u002F",", ",[39,59,60],{},"\u002Fv1\u002Floader.js",").",[35,63,64],{},"A build step where hashes can be computed — a post-build script works for any generator.",[27,66,68],{"id":67},"how-sri-works","How SRI Works",[70,71,76],"pre",{"className":72,"code":73,"language":74,"meta":75,"style":75},"language-html shiki shiki-themes github-light github-dark","\u003Clink rel=\"stylesheet\"\n      href=\"https:\u002F\u002Fcdn.jsdelivr.net\u002Fnpm\u002Fkatex@0.16.11\u002Fdist\u002Fkatex.min.css\"\n      integrity=\"sha384-nB0miv6\u002FjRmo5UMMR1wu3Gz6NLsoTkbqJghGIsx\u002F\u002FRlm+ZU03BU6SQNC66uf4l5+\"\n      crossorigin=\"anonymous\">\n","html","",[39,77,78,102,113,124],{"__ignoreMap":75},[79,80,83,87,91,95,98],"span",{"class":81,"line":82},"line",1,[79,84,86],{"class":85},"sVt8B","\u003C",[79,88,90],{"class":89},"s9eBZ","link",[79,92,94],{"class":93},"sScJk"," rel",[79,96,97],{"class":85},"=",[79,99,101],{"class":100},"sZZnC","\"stylesheet\"\n",[79,103,105,108,110],{"class":81,"line":104},2,[79,106,107],{"class":93},"      href",[79,109,97],{"class":85},[79,111,112],{"class":100},"\"https:\u002F\u002Fcdn.jsdelivr.net\u002Fnpm\u002Fkatex@0.16.11\u002Fdist\u002Fkatex.min.css\"\n",[79,114,116,119,121],{"class":81,"line":115},3,[79,117,118],{"class":93},"      integrity",[79,120,97],{"class":85},[79,122,123],{"class":100},"\"sha384-nB0miv6\u002FjRmo5UMMR1wu3Gz6NLsoTkbqJghGIsx\u002F\u002FRlm+ZU03BU6SQNC66uf4l5+\"\n",[79,125,127,130,132,135],{"class":81,"line":126},4,[79,128,129],{"class":93},"      crossorigin",[79,131,97],{"class":85},[79,133,134],{"class":100},"\"anonymous\"",[79,136,137],{"class":85},">\n",[14,139,140,141,144,145,148,149,152,153,156],{},"The browser fetches the file with CORS (hence ",[39,142,143],{},"crossorigin=\"anonymous\"","), computes its SHA-384 digest, and compares it with the ",[39,146,147],{},"integrity"," value. On a match, the stylesheet applies; on a mismatch, it is discarded and a console error is logged. A ",[39,150,151],{},"Content-Security-Policy"," can additionally require SRI on all scripts with ",[39,154,155],{},"require-sri-for"," in some browsers, but the attribute itself is what does the work everywhere.",[158,159,160,314],"figure",{},[161,162,169,170,169,174,169,178,169,185,169,299],"svg",{"viewBox":163,"role":164,"ariaLabelledBy":165,"xmlns":168},"0 0 760 270","img",[166,167],"sri-flow-title","sri-flow-desc","http:\u002F\u002Fwww.w3.org\u002F2000\u002Fsvg","\n  ",[171,172,173],"title",{"id":166},"Integrity check on a third-party script",[175,176,177],"desc",{"id":167},"The page requests a versioned library from a CDN with an integrity hash. The browser hashes the downloaded bytes. If the CDN returns the original file, the hashes match and the script runs. If the file was tampered with on the CDN, the hashes differ and the script is blocked, so the page loses one feature instead of running attacker code.",[179,180],"rect",{"x":181,"y":181,"width":182,"height":183,"fill":184},"0","760","270","#ffffff",[186,187,189,190,189,198,189,208,189,214,189,220,189,225,189,229,189,232,189,237,189,241,189,244,189,252,189,258,189,262,189,267,189,272,189,276,189,295,169],"g",{"style":188},"font-family:system-ui, sans-serif;font-size:12px","\n    ",[191,192,197],"text",{"x":193,"y":194,"fill":195,"style":196},"380","28","#1f2937","font-size:16px;font-weight:700;text-anchor:middle","The browser checks the bytes before running them",[179,199],{"x":200,"y":201,"width":202,"height":203,"rx":204,"fill":205,"opacity":206,"stroke":205,"style":207},"30","100","150","60","10","#1982c4","0.14","stroke-width:1.5px",[191,209,213],{"x":210,"y":211,"fill":195,"style":212},"105","126","font-weight:700;text-anchor:middle","page",[191,215,219],{"x":210,"y":216,"fill":217,"style":218},"144","#556071","font-size:11px;text-anchor:middle","integrity=\"sha384-…\"",[179,221],{"x":222,"y":201,"width":202,"height":203,"rx":204,"fill":223,"stroke":224,"style":207},"230","#f8fafc","#d9e2ef",[191,226,228],{"x":227,"y":211,"fill":195,"style":212},"305","CDN",[191,230,231],{"x":227,"y":216,"fill":217,"style":218},"returns bytes",[179,233],{"x":234,"y":201,"width":235,"height":203,"rx":204,"fill":236,"opacity":206,"stroke":236,"style":207},"430","130","#6a4c93",[191,238,240],{"x":239,"y":211,"fill":195,"style":212},"495","hash bytes",[191,242,243],{"x":239,"y":216,"fill":217,"style":218},"SHA-384",[179,245],{"x":246,"y":247,"width":235,"height":248,"rx":204,"fill":249,"opacity":250,"stroke":251,"style":207},"600","56","50","#8ac926","0.2","#5a8a16",[191,253,257],{"x":254,"y":255,"fill":256,"style":212},"665","80","#3f6410","match → run",[191,259,261],{"x":254,"y":260,"fill":217,"style":218},"96","original file",[179,263],{"x":246,"y":264,"width":235,"height":248,"rx":204,"fill":265,"opacity":206,"stroke":266,"style":207},"154","#ff595e","#d83b41",[191,268,271],{"x":254,"y":269,"fill":270,"style":212},"178","#b32b30","differ → block",[191,273,275],{"x":254,"y":274,"fill":217,"style":218},"194","tampered file",[186,277,280,281,280,286,280,289,280,292,189],{"stroke":217,"fill":278,"style":279},"none","stroke-width:2px","\n      ",[282,283],"path",{"d":284,"style":285},"M182 130 L226 130","marker-end:url(#sri-arrow)",[282,287],{"d":288,"style":285},"M382 130 L426 130",[282,290],{"d":291,"style":285},"M562 120 L596 86",[282,293],{"d":294,"style":285},"M562 140 L596 174",[191,296,298],{"x":193,"y":297,"fill":217,"style":218},"248","A blocked script degrades one feature; an unchecked tampered script compromises every page",[300,301,189,302,169],"defs",{},[303,304,280,311,189],"marker",{"id":305,"viewBox":306,"refX":307,"refY":308,"markerWidth":309,"markerHeight":309,"orient":310},"sri-arrow","0 0 10 10","8","5","7","auto-start-reverse",[282,312],{"d":313,"fill":217},"M0 0 L10 5 L0 10 z",[315,316,317],"figcaption",{},"SRI converts a supply-chain compromise at the CDN into a failed load, which is exactly the trade you want.",[27,319,321],{"id":320},"step-1-classify-every-external-asset","Step 1: Classify Every External Asset",[14,323,324],{},"SRI only works when the bytes at a URL never change. Sort each external asset into one of three groups:",[326,327,328,344],"table",{},[329,330,331],"thead",{},[332,333,334,338,341],"tr",{},[335,336,337],"th",{},"Asset",[335,339,340],{},"URL type",[335,342,343],{},"Action",[345,346,347,359,369,384,398],"tbody",{},[332,348,349,353,356],{},[350,351,352],"td",{},"KaTeX CSS from jsDelivr, pinned version",[350,354,355],{},"immutable",[350,357,358],{},"add SRI (or self-host)",[332,360,361,364,366],{},[350,362,363],{},"Chart.js from a CDN, pinned version",[350,365,355],{},[350,367,368],{},"self-host at build time",[332,370,371,378,381],{},[350,372,373,374,377],{},"Analytics loader (",[39,375,376],{},"\u002Fjs\u002Fscript.js",")",[350,379,380],{},"mutable, vendor-updated",[350,382,383],{},"cannot use SRI; restrict with CSP",[332,385,386,389,392],{},[350,387,388],{},"Video embed player",[350,390,391],{},"mutable, in an iframe",[350,393,394,395],{},"isolate in iframe; CSP ",[39,396,397],{},"frame-src",[332,399,400,403,406],{},[350,401,402],{},"Google Fonts CSS",[350,404,405],{},"mutable, varies per browser",[350,407,408],{},"self-host fonts instead",[14,410,411,412,25],{},"The mutable ones cannot use SRI at all: the vendor updates the file behind the same URL, and every update would break the page. For those, CSP limits where the script can come from and where it can send data — see ",[21,413,415],{"href":414},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fwriting-a-content-security-policy-for-a-static-site\u002F","Writing a Content Security Policy for a Static Site",[27,417,419],{"id":418},"step-2-prefer-self-hosting","Step 2: Prefer Self-Hosting",[14,421,422,423,426],{},"For immutable third-party files, ask first whether they need to be external at all. On a static site, installing the library from npm and bundling or copying it into the build output has four advantages over a CDN with SRI: no extra origin (no DNS, TCP or TLS setup), no dependency on the CDN's uptime, the file is covered by the site's own cache headers and CSP ",[39,424,425],{},"'self'",", and the lockfile's integrity hash pins it at install time.",[70,428,432],{"className":429,"code":430,"language":431,"meta":75,"style":75},"language-js shiki shiki-themes github-light github-dark","\u002F\u002F astro.config.mjs — copy a library's dist files into the build\nimport { viteStaticCopy } from 'vite-plugin-static-copy';\nexport default {\n  vite: {\n    plugins: [viteStaticCopy({\n      targets: [{ src: 'node_modules\u002Fkatex\u002Fdist\u002Fkatex.min.css', dest: 'vendor\u002Fkatex' },\n                { src: 'node_modules\u002Fkatex\u002Fdist\u002Ffonts\u002F*', dest: 'vendor\u002Fkatex\u002Ffonts' }],\n    })],\n  },\n};\n","js",[39,433,434,440,458,469,474,486,504,521,527,533],{"__ignoreMap":75},[79,435,436],{"class":81,"line":82},[79,437,439],{"class":438},"sJ8bj","\u002F\u002F astro.config.mjs — copy a library's dist files into the build\n",[79,441,442,446,449,452,455],{"class":81,"line":104},[79,443,445],{"class":444},"szBVR","import",[79,447,448],{"class":85}," { viteStaticCopy } ",[79,450,451],{"class":444},"from",[79,453,454],{"class":100}," 'vite-plugin-static-copy'",[79,456,457],{"class":85},";\n",[79,459,460,463,466],{"class":81,"line":115},[79,461,462],{"class":444},"export",[79,464,465],{"class":444}," default",[79,467,468],{"class":85}," {\n",[79,470,471],{"class":81,"line":126},[79,472,473],{"class":85},"  vite: {\n",[79,475,477,480,483],{"class":81,"line":476},5,[79,478,479],{"class":85},"    plugins: [",[79,481,482],{"class":93},"viteStaticCopy",[79,484,485],{"class":85},"({\n",[79,487,489,492,495,498,501],{"class":81,"line":488},6,[79,490,491],{"class":85},"      targets: [{ src: ",[79,493,494],{"class":100},"'node_modules\u002Fkatex\u002Fdist\u002Fkatex.min.css'",[79,496,497],{"class":85},", dest: ",[79,499,500],{"class":100},"'vendor\u002Fkatex'",[79,502,503],{"class":85}," },\n",[79,505,507,510,513,515,518],{"class":81,"line":506},7,[79,508,509],{"class":85},"                { src: ",[79,511,512],{"class":100},"'node_modules\u002Fkatex\u002Fdist\u002Ffonts\u002F*'",[79,514,497],{"class":85},[79,516,517],{"class":100},"'vendor\u002Fkatex\u002Ffonts'",[79,519,520],{"class":85}," }],\n",[79,522,524],{"class":81,"line":523},8,[79,525,526],{"class":85},"    })],\n",[79,528,530],{"class":81,"line":529},9,[79,531,532],{"class":85},"  },\n",[79,534,536],{"class":81,"line":535},10,[79,537,538],{"class":85},"};\n",[14,540,541],{},"The historical argument for public CDNs — a shared browser cache across sites — no longer holds: browsers partition their HTTP cache by top-level site, so a library cached on another site is not reused on yours.",[27,543,545],{"id":544},"step-3-generate-hashes-at-build-time-for-what-stays-external","Step 3: Generate Hashes at Build Time for What Stays External",[14,547,548],{},"Where a file must stay external — a vendor requires it, or the file is very large and rarely used — never paste hashes by hand. Compute them from the exact file during the build and fail if the remote content changes:",[70,550,552],{"className":429,"code":551,"language":431,"meta":75,"style":75},"\u002F\u002F scripts\u002Fsri.mjs — fetch each pinned asset, hash it, rewrite the HTML\nimport { createHash } from 'node:crypto';\nimport { globSync, readFileSync, writeFileSync } from 'node:fs';\n\nconst ASSETS = ['https:\u002F\u002Fcdn.jsdelivr.net\u002Fnpm\u002Fkatex@0.16.11\u002Fdist\u002Fkatex.min.css'];\nconst sri = {};\nfor (const url of ASSETS) {\n  const buf = Buffer.from(await (await fetch(url)).arrayBuffer());\n  sri[url] = 'sha384-' + createHash('sha384').update(buf).digest('base64');\n}\nfor (const f of globSync('dist\u002F**\u002F*.html')) {\n  let html = readFileSync(f, 'utf8');\n  for (const [url, hash] of Object.entries(sri)) {\n    html = html.replaceAll(`href=\"${url}\"`, `href=\"${url}\" integrity=\"${hash}\" crossorigin=\"anonymous\"`)\n               .replaceAll(`src=\"${url}\"`, `src=\"${url}\" integrity=\"${hash}\" crossorigin=\"anonymous\"`);\n  }\n  writeFileSync(f, html);\n}\n",[39,553,554,559,573,587,593,614,626,647,684,724,729,754,776,811,852,883,889,898],{"__ignoreMap":75},[79,555,556],{"class":81,"line":82},[79,557,558],{"class":438},"\u002F\u002F scripts\u002Fsri.mjs — fetch each pinned asset, hash it, rewrite the HTML\n",[79,560,561,563,566,568,571],{"class":81,"line":104},[79,562,445],{"class":444},[79,564,565],{"class":85}," { createHash } ",[79,567,451],{"class":444},[79,569,570],{"class":100}," 'node:crypto'",[79,572,457],{"class":85},[79,574,575,577,580,582,585],{"class":81,"line":115},[79,576,445],{"class":444},[79,578,579],{"class":85}," { globSync, readFileSync, writeFileSync } ",[79,581,451],{"class":444},[79,583,584],{"class":100}," 'node:fs'",[79,586,457],{"class":85},[79,588,589],{"class":81,"line":126},[79,590,592],{"emptyLinePlaceholder":591},true,"\n",[79,594,595,598,602,605,608,611],{"class":81,"line":476},[79,596,597],{"class":444},"const",[79,599,601],{"class":600},"sj4cs"," ASSETS",[79,603,604],{"class":444}," =",[79,606,607],{"class":85}," [",[79,609,610],{"class":100},"'https:\u002F\u002Fcdn.jsdelivr.net\u002Fnpm\u002Fkatex@0.16.11\u002Fdist\u002Fkatex.min.css'",[79,612,613],{"class":85},"];\n",[79,615,616,618,621,623],{"class":81,"line":488},[79,617,597],{"class":444},[79,619,620],{"class":600}," sri",[79,622,604],{"class":444},[79,624,625],{"class":85}," {};\n",[79,627,628,631,634,636,639,642,644],{"class":81,"line":506},[79,629,630],{"class":444},"for",[79,632,633],{"class":85}," (",[79,635,597],{"class":444},[79,637,638],{"class":600}," url",[79,640,641],{"class":444}," of",[79,643,601],{"class":600},[79,645,646],{"class":85},") {\n",[79,648,649,652,655,657,660,662,665,668,670,672,675,678,681],{"class":81,"line":523},[79,650,651],{"class":444},"  const",[79,653,654],{"class":600}," buf",[79,656,604],{"class":444},[79,658,659],{"class":85}," Buffer.",[79,661,451],{"class":93},[79,663,664],{"class":85},"(",[79,666,667],{"class":444},"await",[79,669,633],{"class":85},[79,671,667],{"class":444},[79,673,674],{"class":93}," fetch",[79,676,677],{"class":85},"(url)).",[79,679,680],{"class":93},"arrayBuffer",[79,682,683],{"class":85},"());\n",[79,685,686,689,691,694,697,700,702,705,707,710,713,716,718,721],{"class":81,"line":529},[79,687,688],{"class":85},"  sri[url] ",[79,690,97],{"class":444},[79,692,693],{"class":100}," 'sha384-'",[79,695,696],{"class":444}," +",[79,698,699],{"class":93}," createHash",[79,701,664],{"class":85},[79,703,704],{"class":100},"'sha384'",[79,706,61],{"class":85},[79,708,709],{"class":93},"update",[79,711,712],{"class":85},"(buf).",[79,714,715],{"class":93},"digest",[79,717,664],{"class":85},[79,719,720],{"class":100},"'base64'",[79,722,723],{"class":85},");\n",[79,725,726],{"class":81,"line":535},[79,727,728],{"class":85},"}\n",[79,730,732,734,736,738,741,743,746,748,751],{"class":81,"line":731},11,[79,733,630],{"class":444},[79,735,633],{"class":85},[79,737,597],{"class":444},[79,739,740],{"class":600}," f",[79,742,641],{"class":444},[79,744,745],{"class":93}," globSync",[79,747,664],{"class":85},[79,749,750],{"class":100},"'dist\u002F**\u002F*.html'",[79,752,753],{"class":85},")) {\n",[79,755,757,760,763,765,768,771,774],{"class":81,"line":756},12,[79,758,759],{"class":444},"  let",[79,761,762],{"class":85}," html ",[79,764,97],{"class":444},[79,766,767],{"class":93}," readFileSync",[79,769,770],{"class":85},"(f, ",[79,772,773],{"class":100},"'utf8'",[79,775,723],{"class":85},[79,777,779,782,784,786,788,791,793,796,799,802,805,808],{"class":81,"line":778},13,[79,780,781],{"class":444},"  for",[79,783,633],{"class":85},[79,785,597],{"class":444},[79,787,607],{"class":85},[79,789,790],{"class":600},"url",[79,792,57],{"class":85},[79,794,795],{"class":600},"hash",[79,797,798],{"class":85},"] ",[79,800,801],{"class":444},"of",[79,803,804],{"class":85}," Object.",[79,806,807],{"class":93},"entries",[79,809,810],{"class":85},"(sri)) {\n",[79,812,814,817,819,822,825,827,830,832,835,837,839,841,844,846,849],{"class":81,"line":813},14,[79,815,816],{"class":85},"    html ",[79,818,97],{"class":444},[79,820,821],{"class":85}," html.",[79,823,824],{"class":93},"replaceAll",[79,826,664],{"class":85},[79,828,829],{"class":100},"`href=\"${",[79,831,790],{"class":85},[79,833,834],{"class":100},"}\"`",[79,836,57],{"class":85},[79,838,829],{"class":100},[79,840,790],{"class":85},[79,842,843],{"class":100},"}\" integrity=\"${",[79,845,795],{"class":85},[79,847,848],{"class":100},"}\" crossorigin=\"anonymous\"`",[79,850,851],{"class":85},")\n",[79,853,855,858,860,862,865,867,869,871,873,875,877,879,881],{"class":81,"line":854},15,[79,856,857],{"class":85},"               .",[79,859,824],{"class":93},[79,861,664],{"class":85},[79,863,864],{"class":100},"`src=\"${",[79,866,790],{"class":85},[79,868,834],{"class":100},[79,870,57],{"class":85},[79,872,864],{"class":100},[79,874,790],{"class":85},[79,876,843],{"class":100},[79,878,795],{"class":85},[79,880,848],{"class":100},[79,882,723],{"class":85},[79,884,886],{"class":81,"line":885},16,[79,887,888],{"class":85},"  }\n",[79,890,892,895],{"class":81,"line":891},17,[79,893,894],{"class":93},"  writeFileSync",[79,896,897],{"class":85},"(f, html);\n",[79,899,901],{"class":81,"line":900},18,[79,902,728],{"class":85},[14,904,905,906,909],{},"Commit the computed hashes to a lock file (",[39,907,908],{},"sri.lock.json",") and compare on each build. If a pinned, versioned URL ever returns different bytes, the build fails loudly — that is either a CDN problem or an attack, and in both cases you want to know before readers do.",[158,911,912,1010],{},[161,913,169,918,169,921,169,924,169,927,169,1003],{"viewBox":914,"role":164,"ariaLabelledBy":915,"xmlns":168},"0 0 760 260",[916,917],"sri-choice-title","sri-choice-desc",[171,919,920],{"id":916},"Choosing a control for each external asset",[175,922,923],{"id":917},"A decision flow. Can the file be bundled or copied into the build? If yes, self-host it. If not, is the URL versioned and immutable? If yes, use SRI with hashes generated at build time. If not, the file changes in place, so restrict it with CSP and isolate it in an iframe where possible.",[179,925],{"x":181,"y":181,"width":182,"height":926,"fill":184},"260",[186,928,189,929,189,932,189,937,189,942,189,944,189,947,189,951,189,955,189,960,189,963,189,967,189,972,189,987,189,992,189,997,189,1000,169],{"style":188},[191,930,931],{"x":193,"y":194,"fill":195,"style":196},"Self-host first, SRI second, CSP always",[179,933],{"x":934,"y":203,"width":935,"height":936,"rx":307,"fill":223,"stroke":224,"style":207},"40","240","46",[191,938,941],{"x":939,"y":940,"fill":195,"style":212},"160","88","can it be bundled?",[179,943],{"x":934,"y":202,"width":935,"height":936,"rx":307,"fill":223,"stroke":224,"style":207},[191,945,946],{"x":939,"y":269,"fill":195,"style":212},"versioned, immutable URL?",[179,948],{"x":949,"y":203,"width":950,"height":936,"rx":307,"fill":249,"opacity":250,"stroke":251,"style":207},"360","200",[191,952,954],{"x":953,"y":940,"fill":195,"style":212},"460","self-host",[179,956],{"x":949,"y":202,"width":950,"height":936,"rx":307,"fill":957,"opacity":958,"stroke":959,"style":207},"#ffca3a","0.26","#a97b00",[191,961,962],{"x":953,"y":269,"fill":195,"style":212},"SRI, hashed at build",[179,964],{"x":949,"y":965,"width":949,"height":966,"rx":307,"fill":236,"opacity":206,"stroke":236,"style":207},"210","36",[191,968,971],{"x":969,"y":970,"fill":195,"style":212},"540","233","mutable: CSP allow-list + iframe isolation",[186,973,280,974,280,978,280,981,280,984,189],{"stroke":217,"fill":278,"style":279},[282,975],{"d":976,"style":977},"M282 83 L356 83","marker-end:url(#sri-c-arrow)",[282,979],{"d":980,"style":977},"M160 108 L160 146",[282,982],{"d":983,"style":977},"M282 173 L356 173",[282,985],{"d":986,"style":977},"M160 198 L160 228 L356 228",[191,988,991],{"x":989,"y":990,"fill":217,"style":218},"318","76","yes",[191,993,996],{"x":994,"y":235,"fill":217,"style":995},"172","font-size:11px","no",[191,998,991],{"x":989,"y":999,"fill":217,"style":218},"166",[191,1001,996],{"x":994,"y":1002,"fill":217,"style":995},"220",[300,1004,189,1005,169],{},[303,1006,280,1008,189],{"id":1007,"viewBox":306,"refX":307,"refY":308,"markerWidth":309,"markerHeight":309,"orient":310},"sri-c-arrow",[282,1009],{"d":313,"fill":217},[315,1011,1012],{},"On the site in this guide, five external assets became three self-hosted files, one SRI-checked stylesheet and one CSP-restricted analytics script.",[27,1014,1016],{"id":1015},"measured-impact","Measured Impact",[14,1018,1019],{},"A documentation site loading five third-party assets, before and after the classification above. Performance from Lighthouse 12 mobile, median of five runs.",[326,1021,1022,1035],{},[329,1023,1024],{},[332,1025,1026,1029,1032],{},[335,1027,1028],{},"Measure",[335,1030,1031],{},"Before",[335,1033,1034],{},"After",[345,1036,1037,1048,1057,1067,1077,1086],{},[332,1038,1039,1042,1045],{},[350,1040,1041],{},"External script\u002Fstyle origins",[350,1043,1044],{},"4",[350,1046,1047],{},"2",[332,1049,1050,1053,1055],{},[350,1051,1052],{},"Assets without any integrity or origin control",[350,1054,308],{},[350,1056,181],{},[332,1058,1059,1062,1064],{},[350,1060,1061],{},"Self-hosted (lockfile-pinned)",[350,1063,181],{},[350,1065,1066],{},"3",[332,1068,1069,1072,1074],{},[350,1070,1071],{},"SRI-protected",[350,1073,181],{},[350,1075,1076],{},"1",[332,1078,1079,1082,1084],{},[350,1080,1081],{},"Connections before LCP",[350,1083,308],{},[350,1085,1047],{},[332,1087,1088,1091,1094],{},[350,1089,1090],{},"LCP, docs template",[350,1092,1093],{},"1.64 s",[350,1095,1096],{},"1.41 s",[158,1098,1099,1182],{},[161,1100,169,1105,169,1108,169,1111,169,1113],{"viewBox":1101,"role":164,"ariaLabelledBy":1102,"xmlns":168},"0 0 760 240",[1103,1104],"sri-conn-title","sri-conn-desc",[171,1106,1107],{"id":1103},"Origins contacted before LCP, before and after",[175,1109,1110],{"id":1104},"Before, the docs page contacted its own origin plus four third-party origins before LCP: two library CDNs, a font CDN and an analytics host. After, it contacted its own origin plus one library CDN whose stylesheet is SRI-checked; the analytics host is contacted only after load.",[179,1112],{"x":181,"y":181,"width":182,"height":935,"fill":184},[186,1114,189,1115,189,1118,189,1121,189,1127,189,1132,189,1135,189,1139,189,1142,189,1146,189,1149,189,1153,189,1156,189,1160,189,1162,189,1165,189,1168,189,1171,189,1174,189,1178,169],{"style":188},[191,1116,1117],{"x":193,"y":194,"fill":195,"style":196},"Connections opened before LCP",[191,1119,1031],{"x":200,"y":255,"fill":195,"style":1120},"font-weight:700",[179,1122],{"x":1123,"y":1124,"width":201,"height":194,"rx":1125,"fill":205,"opacity":250,"stroke":205,"style":1126},"120","62","6","stroke-width:1px",[191,1128,1131],{"x":1129,"y":1130,"fill":195,"style":218},"170","81","own origin",[179,1133],{"x":222,"y":1124,"width":201,"height":194,"rx":1125,"fill":265,"opacity":1134,"stroke":266,"style":1126},"0.18",[191,1136,1138],{"x":1137,"y":1130,"fill":195,"style":218},"280","CDN 1",[179,1140],{"x":1141,"y":1124,"width":201,"height":194,"rx":1125,"fill":265,"opacity":1134,"stroke":266,"style":1126},"340",[191,1143,1145],{"x":1144,"y":1130,"fill":195,"style":218},"390","CDN 2",[179,1147],{"x":1148,"y":1124,"width":201,"height":194,"rx":1125,"fill":265,"opacity":1134,"stroke":266,"style":1126},"450",[191,1150,1152],{"x":1151,"y":1130,"fill":195,"style":218},"500","font CDN",[179,1154],{"x":1155,"y":1124,"width":201,"height":194,"rx":1125,"fill":265,"opacity":1134,"stroke":266,"style":1126},"560",[191,1157,1159],{"x":1158,"y":1130,"fill":195,"style":218},"610","analytics",[191,1161,1034],{"x":200,"y":202,"fill":195,"style":1120},[179,1163],{"x":1123,"y":1164,"width":201,"height":194,"rx":1125,"fill":205,"opacity":250,"stroke":205,"style":1126},"132",[191,1166,1131],{"x":1129,"y":1167,"fill":195,"style":218},"151",[179,1169],{"x":222,"y":1164,"width":201,"height":194,"rx":1125,"fill":249,"opacity":1170,"stroke":251,"style":1126},"0.25",[191,1172,1173],{"x":1137,"y":1167,"fill":195,"style":218},"CDN 1 + SRI",[191,1175,1177],{"x":1176,"y":1167,"fill":217,"style":995},"350","analytics now after load",[191,1179,1181],{"x":193,"y":1180,"fill":217,"style":218},"214","Chrome DevTools, docs template, cold cache, simulated fast 4G",[315,1183,1184],{},"Every origin removed is one fewer party to trust and one fewer handshake before the page can paint.",[14,1186,1187,1188,25],{},"Security and performance moved together: removing origins cut three connection setups from the critical path, the same effect measured in ",[21,1189,1191],{"href":1190},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fpreconnect-vs-dns-prefetch-on-static-sites\u002F","Preconnect vs DNS-Prefetch on Static Sites",[27,1193,1195],{"id":1194},"keeping-versions-current","Keeping Versions Current",[14,1197,1198,1199,1202],{},"Pinning a version for SRI or self-hosting also freezes it, and frozen libraries accumulate vulnerabilities. Put pinned external URLs in a single config file, not scattered through templates, so a dependency bot or a scheduled job can check for newer releases and open a pull request that updates the URL and regenerates the hash together. For self-hosted libraries this is automatic, because they come from ",[39,1200,1201],{},"package.json"," and the normal dependency update flow covers them — one more reason self-hosting is the default. Review each update's changelog as you would any dependency; an integrity hash proves the file is the one you chose, not that you chose well.",[27,1204,1206],{"id":1205},"what-sri-does-not-cover","What SRI Does Not Cover",[14,1208,1209,1210,1213,1214,1218],{},"SRI checks a file's bytes at load time; it says nothing about what the file does. A pinned library version with a known vulnerability passes SRI perfectly. It also cannot protect scripts loaded dynamically by other scripts — if your SRI-checked loader then fetches ",[39,1211,1212],{},"https:\u002F\u002Fvendor.example\u002Flatest.js"," without an integrity value, that second file is unchecked. And it does not apply to iframes: an embedded player runs in its own document with its own resources. That is why SRI works alongside the other controls rather than replacing them: dependency auditing to catch vulnerable versions (",[21,1215,1217],{"href":1216},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fauditing-npm-dependencies-in-ssg-pipelines\u002F","Auditing npm Dependencies in SSG Pipelines","), CSP to constrain dynamically loaded code, and sandboxed iframes for embeds.",[27,1220,1222],{"id":1221},"pitfalls-rollback","Pitfalls & Rollback",[32,1224,1225,1232,1241,1247,1253],{},[35,1226,1227,1231],{},[1228,1229,1230],"strong",{},"SRI on a mutable URL."," The vendor's next update breaks the page. Use it only on versioned, immutable URLs.",[35,1233,1234,1240],{},[1228,1235,1236,1237,25],{},"Missing ",[39,1238,1239],{},"crossorigin"," Without CORS the browser cannot read the bytes, the check fails, and the asset is blocked.",[35,1242,1243,1246],{},[1228,1244,1245],{},"Hand-pasted hashes."," They go stale on version bumps. Generate them in the build and lock them.",[35,1248,1249,1252],{},[1228,1250,1251],{},"Using a CDN for cache sharing."," Browser caches are partitioned per site; the shared-cache benefit no longer exists.",[35,1254,1255,1258,1259,1261],{},[1228,1256,1257],{},"Rollback:"," removing an ",[39,1260,147],{}," attribute restores unchecked loading immediately; reverting a self-hosting change points the tag back at the CDN. Both are single-commit changes.",[27,1263,1265],{"id":1264},"conclusion","Conclusion",[14,1267,1268],{},"Subresource Integrity turns \"we trust this CDN\" into \"we trust these exact bytes\". For a static site the better move is often to remove the CDN entirely by self-hosting at build time, which also makes pages faster; SRI is the right tool for immutable files that must stay external, with hashes generated and locked during the build. Mutable vendor scripts cannot use SRI at all and need CSP instead. On the docs site in this guide, that split left no third-party asset uncontrolled and cut LCP by 230 ms along the way.",[27,1270,1272],{"id":1271},"faq","FAQ",[1274,1275,1277],"h3",{"id":1276},"what-does-subresource-integrity-do","What does Subresource Integrity do?",[14,1279,1280],{},"It lets you state the expected cryptographic hash of a script or stylesheet in the integrity attribute. The browser downloads the file, hashes it, and refuses to use it if the hash does not match, so a file modified on the CDN never runs.",[1274,1282,1284],{"id":1283},"can-i-use-sri-with-any-third-party-script","Can I use SRI with any third-party script?",[14,1286,1287],{},"Only with files whose content never changes at a given URL, such as versioned library files on a public CDN. Scripts that vendors update in place, like most analytics and tag loaders, change content without changing URL and would fail the check.",[1274,1289,1291],{"id":1290},"is-self-hosting-better-than-sri","Is self-hosting better than SRI?",[14,1293,1294],{},"Usually, for a static site. Bundling the library at build time removes the third-party origin, the extra connection and the tampering risk in one step. SRI is for cases where the file must stay on an external host.",[1274,1296,1298],{"id":1297},"why-is-crossorigin-required-with-sri","Why is crossorigin required with SRI?",[14,1300,1301],{},"The browser needs to read the response body to hash it, which for cross-origin requests requires CORS. Without crossorigin=\"anonymous\", the integrity check fails and the resource is blocked.",[27,1303,1305],{"id":1304},"related","Related",[32,1307,1308,1317,1324,1331,1338],{},[35,1309,1310,1313,1314,1316],{},[1228,1311,1312],{},"Parent:"," ",[21,1315,24],{"href":23}," — the full hardening set.",[35,1318,1319,1323],{},[21,1320,1322],{"href":1321},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fhash-based-csp-for-inline-scripts-in-astro\u002F","Hash-Based CSP for Inline Scripts in Astro"," — the same hashing idea for inline code.",[35,1325,1326,1330],{},[21,1327,1329],{"href":1328},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Fself-hosting-analytics-to-cut-third-party-requests\u002F","Self-Hosting Analytics to Cut Third-Party Requests"," — removing a mutable vendor script.",[35,1332,1333,1337],{},[21,1334,1336],{"href":1335},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fself-hosting-google-fonts-to-eliminate-layout-shift\u002F","Self-Hosting Google Fonts to Eliminate Layout Shift"," — the font equivalent.",[35,1339,1340,1342],{},[21,1341,1217],{"href":1216}," — what SRI cannot catch.",[1344,1345,1346],"style",{},"html pre.shiki code .sVt8B, html code.shiki .sVt8B{--shiki-default:#24292E;--shiki-dark:#E1E4E8}html pre.shiki code .s9eBZ, html code.shiki .s9eBZ{--shiki-default:#22863A;--shiki-dark:#85E89D}html pre.shiki code .sScJk, html code.shiki .sScJk{--shiki-default:#6F42C1;--shiki-dark:#B392F0}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sJ8bj, html code.shiki .sJ8bj{--shiki-default:#6A737D;--shiki-dark:#6A737D}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}",{"title":75,"searchDepth":104,"depth":104,"links":1348},[1349,1350,1351,1352,1353,1354,1355,1356,1357,1358,1359,1365],{"id":29,"depth":104,"text":30},{"id":67,"depth":104,"text":68},{"id":320,"depth":104,"text":321},{"id":418,"depth":104,"text":419},{"id":544,"depth":104,"text":545},{"id":1015,"depth":104,"text":1016},{"id":1194,"depth":104,"text":1195},{"id":1205,"depth":104,"text":1206},{"id":1221,"depth":104,"text":1222},{"id":1264,"depth":104,"text":1265},{"id":1271,"depth":104,"text":1272,"children":1360},[1361,1362,1363,1364],{"id":1276,"depth":115,"text":1277},{"id":1283,"depth":115,"text":1284},{"id":1290,"depth":115,"text":1291},{"id":1297,"depth":115,"text":1298},{"id":1304,"depth":104,"text":1305},[1367,1370,1373,1374],{"name":1368,"item":1369},"Home","\u002F",{"name":1371,"item":1372},"Production-Ready Deployment & CI\u002FCD Workflows","\u002Fproduction-ready-deployment-cicd-workflows\u002F",{"name":24,"item":23},{"name":5,"item":1375},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsubresource-integrity-for-third-party-assets\u002F","2026-09-18","Protect a static site from tampered CDN scripts with Subresource Integrity: when it applies, generating hashes at build time, and when self-hosting is better.","md",[1380,1381,1382,1383],{"q":1277,"a":1280},{"q":1284,"a":1287},{"q":1291,"a":1294},{"q":1298,"a":1301},{},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsubresource-integrity-for-third-party-assets",{"title":5,"description":1377},"production-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsubresource-integrity-for-third-party-assets\u002Findex","article","_6mifblTkqJrVzlJboRTjAc2cGCRvZGeGvuPNfR018M",[1391,1394,1397,1400,1403,1406,1409,1412,1415,1418,1421,1424,1427,1430,1433,1436,1439,1442,1445,1448,1451,1454,1457,1460,1463,1466,1469,1472,1475,1478,1481,1484,1487,1490,1493,1496,1499,1502,1505,1508,1511,1514,1517,1520,1523,1526,1529,1532,1535,1538,1541,1544,1547,1550,1553,1556,1559,1562,1565,1568,1571,1574,1577,1580,1583,1586,1589,1592,1595,1598,1601,1604,1607,1610,1613,1616,1619,1622,1625,1628,1631,1634,1637,1640,1643,1646,1649,1652,1655,1658,1661,1664,1667,1670,1673,1676,1679,1682,1685,1688,1691,1694,1697,1700,1702,1705,1708,1711,1714,1717,1720,1723,1725,1728,1731,1734,1737,1740,1743,1746,1749,1752,1755,1758,1761,1764,1767,1770,1773,1776,1779,1782,1785,1788,1791,1794,1797,1800,1803,1806,1809,1812,1815,1818,1821,1824,1827,1830,1833,1836,1839,1842,1845,1848,1851,1854,1857,1860,1863,1866,1869,1872,1875,1878,1880,1883,1885,1887,1890,1891,1893,1896,1899,1902,1905,1908,1911,1914,1917,1920,1923,1926,1929],{"path":1392,"title":1393},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fastro-vs-eleventy-build-times-at-10000-pages","Astro vs Eleventy Build Times at 10,000 Pages",{"path":1395,"title":1396},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fchoosing-between-astro-and-eleventy-for-large-docs","Astro vs Eleventy for Large Docs (1000+ Pages)",{"path":1398,"title":1399},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fcontent-collections-vs-eleventy-data-cascade","Content Collections vs the Eleventy Data Cascade",{"path":1401,"title":1402},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites","Astro vs Eleventy for Documentation Sites",{"path":1404,"title":1405},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fshortcodes-vs-components-for-docs-authors","Shortcodes vs Components for Docs Authors",{"path":1407,"title":1408},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fsidebar-navigation-in-astro-and-eleventy","Sidebar Navigation in Astro and Eleventy",{"path":1410,"title":1411},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fcustomizing-starlight-without-forking-the-theme","Customizing Starlight Without Forking the Theme",{"path":1413,"title":1414},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fdocusaurus-vs-starlight-for-product-documentation","Docusaurus vs Starlight for Product Documentation",{"path":1416,"title":1417},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress","Docs Frameworks: Docusaurus, Starlight and VitePress",{"path":1419,"title":1420},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fmdx-vs-markdoc-for-docs-content","MDX vs Markdoc for Docs Content",{"path":1422,"title":1423},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fmigrating-from-mkdocs-to-starlight","Migrating from MkDocs to Starlight",{"path":1425,"title":1426},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fversioned-documentation-with-docusaurus","Versioned Documentation with Docusaurus",{"path":1428,"title":1429},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fvitepress-for-library-documentation","VitePress for Library Documentation",{"path":1431,"title":1432},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fhow-to-benchmark-hugo-vs-astro-build-speeds","How to Benchmark Hugo vs Astro Build Speeds",{"path":1434,"title":1435},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fhugo-partialcached-for-faster-builds","Hugo partialCached for Faster Builds",{"path":1437,"title":1438},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories","Hugo Build Times for Large Repositories",{"path":1440,"title":1441},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fprofiling-hugo-templates-with-template-metrics","Profiling Hugo Templates With Template Metrics",{"path":1443,"title":1444},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Freducing-hugo-memory-usage-on-ci-runners","Reducing Hugo Memory Usage on CI Runners",{"path":1446,"title":1447},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fspeeding-up-hugo-builds-with-render-hooks-and-caching","Speeding Up Hugo Builds with Render Hooks & Caching",{"path":1449,"title":1450},"\u002Fchoosing-the-right-static-site-generator-for-production","Choosing the Right Static Site Generator for Production",{"path":1452,"title":1453},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Feleventy-vs-jekyll-for-markdown-heavy-blogs","Eleventy vs Jekyll for Markdown-Heavy Blogs",{"path":1455,"title":1456},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem","Jekyll Plugin Ecosystem",{"path":1458,"title":1459},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Freplacing-jekyll-plugins-when-migrating-to-eleventy","Replacing Jekyll Plugins When Migrating to Eleventy",{"path":1461,"title":1462},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Frunning-jekyll-on-github-pages-without-plugins","Running Jekyll on GitHub Pages Without Plugins",{"path":1464,"title":1465},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Fspeeding-up-slow-jekyll-builds","Speeding Up Slow Jekyll Builds",{"path":1467,"title":1468},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Fupgrading-jekyll-and-ruby-versions-safely","Upgrading Jekyll and Ruby Versions Safely",{"path":1470,"title":1471},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fconverting-front-matter-at-scale-during-migration","Converting Front Matter at Scale During Migration",{"path":1473,"title":1474},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators","Migrating Between Static Site Generators",{"path":1476,"title":1477},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fkeeping-redirects-working-after-an-ssg-migration","Keeping Redirects Working After an SSG Migration",{"path":1479,"title":1480},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-a-docs-site-from-jekyll-to-hugo","Migrating a Docs Site From Jekyll to Hugo",{"path":1482,"title":1483},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-from-gatsby-to-astro","Migrating from Gatsby to Astro",{"path":1485,"title":1486},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-from-hugo-to-astro-without-breaking-urls","Migrating From Hugo to Astro Without Breaking URLs",{"path":1488,"title":1489},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-wordpress-to-a-static-site-generator","Migrating WordPress to a Static Site Generator",{"path":1491,"title":1492},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fporting-shortcodes-and-includes-between-generators","Porting Shortcodes and Includes Between Generators",{"path":1494,"title":1495},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fhandling-dynamic-routes-in-nextjs-static-export","Handling Dynamic Routes in Next.js Static Export",{"path":1497,"title":1498},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites","Next.js Static Export for Content Sites",{"path":1500,"title":1501},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fmigrating-from-gatsby-to-nextjs-static-export","Migrating from Gatsby to Next.js Static Export",{"path":1503,"title":1504},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fnextjs-app-router-static-export-limitations","Next.js App Router Static Export Limitations",{"path":1506,"title":1507},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fnextjs-static-export-vs-astro-for-marketing-sites","Next.js Static Export vs Astro for Marketing",{"path":1509,"title":1510},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Foptimizing-images-in-nextjs-static-export","Optimizing Images in Next.js Static Export",{"path":1512,"title":1513},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fadding-pagefind-to-an-astro-site","Adding Pagefind to an Astro Site",{"path":1515,"title":1516},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fbuilding-a-lunr-index-at-build-time-in-eleventy","Building a Lunr Index at Build Time in Eleventy",{"path":1518,"title":1519},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites","Search for Static Sites",{"path":1521,"title":1522},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Findexing-hugo-sites-with-pagefind","Indexing Hugo Sites with Pagefind",{"path":1524,"title":1525},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fmultilingual-search-on-static-sites","Multilingual Search on Static Sites",{"path":1527,"title":1528},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fpagefind-vs-algolia-docsearch","Pagefind vs Algolia DocSearch",{"path":1530,"title":1531},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fsearch-index-size-budgets-for-large-docs","Search Index Size Budgets for Large Docs",{"path":1533,"title":1534},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fbest-ssg-for-technical-writers-without-coding-experience","Best SSG for Non-Developer Technical Writers",{"path":1536,"title":1537},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fchoosing-an-ssg-for-api-reference-documentation","Choosing an SSG for API Reference Documentation",{"path":1539,"title":1540},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fevaluating-ssg-accessibility-defaults","Evaluating SSG Accessibility Defaults",{"path":1542,"title":1543},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix","SSG Framework Selection Matrix",{"path":1545,"title":1546},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fpicking-an-ssg-for-a-multi-language-documentation-site","Picking an SSG for a Multi-Language Docs Site",{"path":1548,"title":1549},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fssg-selection-checklist-for-engineering-teams","SSG Selection Checklist for Engineering Teams",{"path":1551,"title":1552},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Ftotal-cost-of-ownership-for-static-site-generators","Total Cost of Ownership for Static Site Generators",{"path":1554,"title":1555},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fcache-busting-with-content-hashed-filenames","Cache Busting with Content-Hashed Filenames",{"path":1557,"title":1558},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs","CDN Caching Rules for SSGs",{"path":1560,"title":1561},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fpurging-the-cdn-cache-after-a-static-deploy","Purging the CDN Cache After a Static Deploy",{"path":1563,"title":1564},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fsetting-cache-control-headers-on-cloudflare-pages","Cache-Control Headers on Cloudflare Pages",{"path":1566,"title":1567},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fsetting-up-proper-cache-headers-on-netlify","Proper Cache Headers on Netlify for SSGs",{"path":1569,"title":1570},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fstale-while-revalidate-for-static-html","Stale-While-Revalidate for Static HTML",{"path":1572,"title":1573},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Feliminating-layout-shift-from-web-fonts","Eliminating Layout Shift From Web Fonts",{"path":1575,"title":1576},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Ffixing-cls-from-cookie-banners","Fixing CLS from Cookie Banners",{"path":1578,"title":1579},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Ffixing-cls-from-late-loading-embeds","Fixing CLS From Late-Loading Embeds",{"path":1581,"title":1582},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Ffixing-cls-from-sticky-headers-and-anchor-links","Fixing CLS from Sticky Headers and Anchor Links",{"path":1584,"title":1585},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites","Cumulative Layout Shift Fixes for Static Sites",{"path":1587,"title":1588},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Fmeasuring-cls-in-the-field-with-web-vitals-js","Measuring CLS in the Field With web-vitals.js",{"path":1590,"title":1591},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Freserving-space-for-images-and-embeds-to-stop-layout-shift","Reserving Space for Images and Embeds",{"path":1593,"title":1594},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Ffont-display-optional-vs-swap","font-display: optional vs swap",{"path":1596,"title":1597},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites","Font Loading Strategies for Static Sites",{"path":1599,"title":1600},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fmetric-matched-fallback-fonts-with-size-adjust","Metric-Matched Fallback Fonts with size-adjust",{"path":1602,"title":1603},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fpreloading-fonts-without-double-downloads","Preloading Fonts Without Double Downloads",{"path":1605,"title":1606},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fself-hosting-google-fonts-to-eliminate-layout-shift","Self-Host Google Fonts to Eliminate Layout Shift",{"path":1608,"title":1609},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fsubsetting-variable-fonts-for-faster-first-render","Subsetting Variable Fonts for Faster First Render",{"path":1611,"title":1612},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fbuilding-an-image-cdn-pipeline-for-static-sites","Building an Image CDN Pipeline for Static Sites",{"path":1614,"title":1615},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fgenerating-open-graph-images-at-build-time","Generating Open Graph Images at Build Time",{"path":1617,"title":1618},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro","Image Optimization Pipelines in Astro",{"path":1620,"title":1621},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Flazy-loading-images-without-hurting-lcp","Lazy-Loading Images Without Hurting LCP",{"path":1623,"title":1624},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Foptimizing-webp-images-in-hugo-without-plugins","Optimizing WebP Images in Hugo Without Plugins",{"path":1626,"title":1627},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fresponsive-images-with-srcset-in-eleventy","Responsive Images with srcset in Eleventy",{"path":1629,"title":1630},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fserving-avif-with-fallbacks-on-static-sites","Serving AVIF With Fallbacks on Static Sites",{"path":1632,"title":1633},"\u002Fperformance-optimization-core-web-vitals-for-ssgs","Core Web Vitals Optimization for SSGs",{"path":1635,"title":1636},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fastro-islands-vs-full-hydration-performance","Astro Islands vs Full Hydration Performance",{"path":1638,"title":1639},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fdeferring-hydration-with-client-visible-in-astro","Deferring Hydration with client:visible in Astro",{"path":1641,"title":1642},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fhow-to-reduce-bundle-size-in-eleventy-builds","How to Reduce Bundle Size in Eleventy Builds",{"path":1644,"title":1645},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering","JavaScript Hydration & Partial Rendering",{"path":1647,"title":1648},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fmeasuring-inp-on-static-sites-with-real-user-monitoring","Measuring INP on Static Sites with RUM",{"path":1650,"title":1651},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Freplacing-react-islands-with-web-components","Replacing React Islands with Web Components",{"path":1653,"title":1654},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Feliminating-render-blocking-css-on-static-sites","Eliminating Render-Blocking CSS on Static Sites",{"path":1656,"title":1657},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Ffixing-lcp-on-text-heavy-documentation-pages","Fixing LCP on Text-Heavy Documentation Pages",{"path":1659,"title":1660},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites","Largest Contentful Paint Optimization for Static Sites",{"path":1662,"title":1663},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Fmeasuring-lcp-subparts-with-devtools","Measuring LCP Subparts with DevTools",{"path":1665,"title":1666},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Foptimizing-lcp-on-astro-with-priority-hints","Optimizing LCP on Astro with Priority Hints",{"path":1668,"title":1669},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Freducing-lcp-from-hero-images-on-static-sites","Reducing LCP from Hero Images on Static Sites",{"path":1671,"title":1672},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Fcomparing-lab-and-field-data-with-crux","Comparing Lab and Field Data with CrUX",{"path":1674,"title":1675},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci","Performance Budgets and Lighthouse CI",{"path":1677,"title":1678},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Freducing-lighthouse-score-variance-in-ci","Reducing Lighthouse Score Variance in CI",{"path":1680,"title":1681},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Frunning-webpagetest-scripts-against-preview-deploys","Running WebPageTest Scripts Against Preview Deploys",{"path":1683,"title":1684},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Fsetting-up-lighthouse-ci-for-a-static-site","Setting Up Lighthouse CI for a Static Site",{"path":1686,"title":1687},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Ftracking-bundle-size-per-pull-request","Tracking Bundle Size per Pull Request",{"path":1689,"title":1690},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Fwriting-a-performance-budget-that-fails-builds","Writing a Performance Budget That Fails Builds",{"path":1692,"title":1693},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fauditing-unused-preloads","Auditing Unused Preloads",{"path":1695,"title":1696},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed","Resource Hints and Navigation Speed",{"path":1698,"title":1699},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Finstant-navigation-with-speculation-rules","Instant Navigation with Speculation Rules",{"path":1701,"title":1191},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fpreconnect-vs-dns-prefetch-on-static-sites",{"path":1703,"title":1704},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fprefetching-links-in-astro","Prefetching Links in Astro",{"path":1706,"title":1707},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fview-transitions-on-multi-page-static-sites","View Transitions on Multi-Page Static Sites",{"path":1709,"title":1710},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Fauditing-third-party-scripts-with-lighthouse","Auditing Third-Party Scripts With Lighthouse",{"path":1712,"title":1713},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites","Third-Party Script Performance on Static Sites",{"path":1715,"title":1716},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Flazy-loading-youtube-embeds-on-static-sites","Lazy-Loading YouTube Embeds on Static Sites",{"path":1718,"title":1719},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Floading-google-tag-manager-without-hurting-inp","Loading Google Tag Manager Without Hurting INP",{"path":1721,"title":1722},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Frunning-third-party-scripts-in-a-web-worker-with-partytown","Running Third-Party Scripts in a Web Worker with Partytown",{"path":1724,"title":1329},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Fself-hosting-analytics-to-cut-third-party-requests",{"path":1726,"title":1727},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fautomating-eleventy-deployments-with-cloudflare-pages","Automating Eleventy Deployments on Cloudflare Pages",{"path":1729,"title":1730},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fconfiguring-redirects-on-cloudflare-pages","Configuring Redirects on Cloudflare Pages",{"path":1732,"title":1733},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fcustom-domains-and-tls-on-cloudflare-pages","Custom Domains and TLS on Cloudflare Pages",{"path":1735,"title":1736},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fdeploying-hugo-to-cloudflare-pages-and-workers","Deploying Hugo to Cloudflare Pages and Workers",{"path":1738,"title":1739},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup","Cloudflare Pages Edge Caching Setup",{"path":1741,"title":1742},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fmigrating-from-cloudflare-pages-to-workers-static-assets","Migrating from Cloudflare Pages to Workers Static Assets",{"path":1744,"title":1745},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fchecking-links-in-pull-requests","Checking Links in Pull Requests",{"path":1747,"title":1748},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fdocs-as-code-review-workflow-for-writers","Docs-as-Code Review Workflow for Writers",{"path":1750,"title":1751},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Feditorial-checks-with-vale-in-ci","Editorial Checks with Vale in CI",{"path":1753,"title":1754},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams","Content Workflows for Documentation Teams",{"path":1756,"title":1757},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fscheduling-content-publication-with-cron-triggered-builds","Scheduling Content Publication With Cron-Triggered Builds",{"path":1759,"title":1760},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fwiring-a-headless-cms-to-a-static-build","Wiring a Headless CMS to a Static Build",{"path":1762,"title":1763},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fbuilding-astro-sites-with-github-actions","Building Astro Sites with GitHub Actions",{"path":1765,"title":1766},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fcaching-node-modules-in-github-actions-for-faster-ssg-builds","Caching node_modules in GitHub Actions",{"path":1768,"title":1769},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fdeploying-to-github-pages-with-actions","Deploying to GitHub Pages with Actions",{"path":1771,"title":1772},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fdeploying-to-multiple-environments-from-one-workflow","Deploying to Multiple Environments From One Workflow",{"path":1774,"title":1775},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fhow-to-set-up-github-actions-for-hugo-deployments","GitHub Actions for Hugo Deployments",{"path":1777,"title":1778},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds","GitHub Actions for Automated SSG Builds",{"path":1780,"title":1781},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fmatrix-builds-for-multi-site-monorepos","Matrix Builds for Multi-Site Monorepos",{"path":1783,"title":1784},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fcaching-hugo-builds-in-github-actions","Caching Hugo Builds in GitHub Actions",{"path":1786,"title":1787},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fenabling-incremental-builds-in-eleventy","Enabling Incremental Builds in Eleventy",{"path":1789,"title":1790},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fincremental-builds-in-astro-with-the-content-layer","Incremental Builds in Astro with the Content Layer",{"path":1792,"title":1793},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs","Incremental Builds and Build Caching for SSGs",{"path":1795,"title":1796},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fmeasuring-build-time-regressions-in-ci","Measuring Build-Time Regressions in CI",{"path":1798,"title":1799},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fremote-caching-with-turborepo-for-ssg-monorepos","Remote Caching with Turborepo for SSG Monorepos",{"path":1801,"title":1802},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fsharing-build-cache-across-ci-runners","Sharing Build Cache Across CI Runners",{"path":1804,"title":1805},"\u002Fproduction-ready-deployment-cicd-workflows","Production-Ready Deployment & CI\u002FCD for SSGs",{"path":1807,"title":1808},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Falerting-on-cache-hit-ratio-drops","Alerting on Cache Hit Ratio Drops",{"path":1810,"title":1811},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Fbuilding-a-core-web-vitals-dashboard-from-rum-data","Building a Core Web Vitals Dashboard from RUM Data",{"path":1813,"title":1814},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Fcrawling-for-broken-links-on-a-schedule","Crawling for Broken Links on a Schedule",{"path":1816,"title":1817},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production","Monitoring Static Sites in Production",{"path":1819,"title":1820},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Flogging-404s-at-the-edge","Logging 404s at the Edge",{"path":1822,"title":1823},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Fuptime-and-synthetic-checks-for-static-sites","Uptime and Synthetic Checks for Static Sites",{"path":1825,"title":1826},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fconfiguring-vercel-for-hugo-and-eleventy","Configuring Vercel for Hugo and Eleventy",{"path":1828,"title":1829},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies","Netlify vs Vercel Deployment Strategies",{"path":1831,"title":1832},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fnetlify-build-hooks-for-content-updates","Netlify Build Hooks for Content Updates",{"path":1834,"title":1835},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fnetlify-redirects-and-rewrites-for-static-sites","Netlify Redirects and Rewrites for Static Sites",{"path":1837,"title":1838},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fsetting-up-deploy-previews-on-netlify-for-every-pull-request","Netlify Deploy Previews for Every Pull Request",{"path":1840,"title":1841},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fvercel-isr-vs-static-generation-for-ssgs","Vercel ISR vs Static Generation for SSGs",{"path":1843,"title":1844},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fautomating-preview-deploy-pipelines-with-github-actions","Automating Preview Deploy Pipelines with GitHub Actions",{"path":1846,"title":1847},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fcleaning-up-stale-preview-deployments","Cleaning Up Stale Preview Deployments",{"path":1849,"title":1850},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests","Preview Environments for Pull Requests",{"path":1852,"title":1853},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fpassword-protecting-preview-deployments","Password-Protecting Preview Deployments",{"path":1855,"title":1856},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fpreviewing-headless-cms-drafts","Previewing Headless CMS Drafts",{"path":1858,"title":1859},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fvisual-regression-testing-on-preview-deploys","Visual Regression Testing on Preview Deploys",{"path":1861,"title":1862},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Fatomic-deploys-vs-incremental-uploads","Atomic Deploys vs Incremental Uploads",{"path":1864,"title":1865},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Fcanary-releases-for-static-sites","Canary Releases for Static Sites",{"path":1867,"title":1868},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Ffeature-flags-on-static-sites","Feature Flags on Static Sites",{"path":1870,"title":1871},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites","Rollbacks and Deploy Safety for Static Sites",{"path":1873,"title":1874},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Frolling-back-a-bad-static-deploy-in-under-a-minute","Rolling Back a Bad Static Deploy in Under a Minute",{"path":1876,"title":1877},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Frunning-smoke-tests-against-a-preview-url","Running Smoke Tests Against a Preview URL",{"path":1879,"title":1217},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fauditing-npm-dependencies-in-ssg-pipelines",{"path":1881,"title":1882},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fenabling-hsts-and-preload-safely","Enabling HSTS and Preload Safely",{"path":1884,"title":1322},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fhash-based-csp-for-inline-scripts-in-astro",{"path":1886,"title":24},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites",{"path":1888,"title":1889},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsecuring-deploy-credentials-with-github-oidc","Securing Deploy Credentials with GitHub OIDC",{"path":1385,"title":5},{"path":1892,"title":415},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fwriting-a-content-security-policy-for-a-static-site",{"path":1894,"title":1895},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fclean-urls-and-trailing-slashes-on-s3","Clean URLs and Trailing Slashes on S3",{"path":1897,"title":1898},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fcloudfront-functions-for-redirects","CloudFront Functions for Redirects",{"path":1900,"title":1901},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fdeploying-a-static-site-to-s3-and-cloudfront","Deploying a Static Site to S3 and CloudFront",{"path":1903,"title":1904},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites","Self-Hosting Static Sites on S3, Nginx and Caddy",{"path":1906,"title":1907},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fserving-a-static-site-with-caddy","Serving a Static Site with Caddy",{"path":1909,"title":1910},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fserving-a-static-site-with-nginx","Serving a Static Site with Nginx",{"path":1912,"title":1913},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fzero-downtime-deploys-with-symlink-swaps","Zero-Downtime Deploys with Symlink Swaps",{"path":1915,"title":1916},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fadding-a-contact-form-with-cloudflare-workers","Adding a Contact Form with Cloudflare Workers",{"path":1918,"title":1919},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fhandling-form-submissions-on-a-static-site","Handling Form Submissions on a Static Site",{"path":1921,"title":1922},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites","Serverless Functions for Static Sites",{"path":1924,"title":1925},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fnetlify-functions-vs-cloudflare-workers","Netlify Functions vs Cloudflare Workers",{"path":1927,"title":1928},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fprotecting-a-static-site-behind-authentication","Protecting a Static Site Behind Authentication",{"path":1930,"title":1931},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fproxying-third-party-apis-from-an-edge-function","Proxying Third-Party APIs from an Edge Function",1789722847393]