Introduce `VerifyOnlyElementInFlux` Refaster rule #2369

	name: Update `error-prone.picnic.tech` website content
	on:
	pull_request:
	push:
	branches: [ master, website ]
	permissions:
	contents: read
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	jobs:
	build:
	runs-on: ubuntu-22.04
	steps:
	- name: Check out code
	uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
	with:
	persist-credentials: false
	- uses: ruby/setup-ruby@250fcd6a742febb1123a77a841497ccaa8b9e939 # v1.152.0
	with:
	working-directory: ./website
	bundler-cache: true
	- name: Configure Github Pages
	uses: actions/configure-pages@f156874f8191504dae5b037505266ed5dda6c382 # v3.0.6
	- name: Generate documentation
	run: ./generate-docs.sh
	- name: Build website with Jekyll
	working-directory: ./website
	run: bundle exec jekyll build
	- name: Validate HTML output
	working-directory: ./website
	# XXX: Drop `--disable_external true` once we fully adopted the
	# "Refaster rules" terminology on our website and in the code.
	run: bundle exec htmlproofer --disable_external true --check-external-hash false ./_site
	- name: Upload website as artifact
	uses: actions/upload-pages-artifact@66b63f4a7de003f4f00cc8e9af4b83b8f2abdb96 # v1.0.9
	with:
	path: ./website/_site
	deploy:
	if: github.ref == 'refs/heads/website'
	needs: build
	permissions:
	id-token: write
	pages: write
	runs-on: ubuntu-22.04
	environment:
	name: github-pages
	url: ${{ steps.deployment.outputs.page_url }}
	steps:
	- name: Deploy to GitHub Pages
	id: deployment
	uses: actions/deploy-pages@ee48c7b82e077d7b8ef30b50a719e6a792a50c9a # v2.0.2

Provide feedback