From c334cb158641b3d21fc56f4219f678bf06063505 Mon Sep 17 00:00:00 2001
From: ReenigneArcher <42013603+ReenigneArcher@users.noreply.github.com>
Date: Mon, 31 Aug 2026 23:51:07 -0400
Subject: [PATCH] refactor: sonar fixes

---
 .github/workflows/jekyll-build.yml | 5 ++++-
 Dockerfile                         | 2 ++
 scripts/readthedocs_build.sh       | 2 +-
 3 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/jekyll-build.yml b/.github/workflows/jekyll-build.yml
index 7f3fb5cf..fa0b24b4 100644
--- a/.github/workflows/jekyll-build.yml
+++ b/.github/workflows/jekyll-build.yml
@@ -203,7 +203,10 @@ jobs:
           ruby-version: '3.3'
 
       - name: Install dependencies
-        run: bundle install
+        run: |
+          bundle config set --local deployment true
+          bundle config set --local path "${RUNNER_TEMP}/bundle"
+          bundle install
 
       - name: Setup Pages
         id: configure-pages
diff --git a/Dockerfile b/Dockerfile
index 6c60feda..657d0f53 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -67,6 +67,8 @@ RUN <<_SETUP
 #!/bin/bash
 set -e
 
+bundle config set --local deployment true
+bundle config set --local path /usr/local/bundle
 bundle install
 
 # Create a non-root user and transfer ownership
diff --git a/scripts/readthedocs_build.sh b/scripts/readthedocs_build.sh
index e24ca596..3340e140 100644
--- a/scripts/readthedocs_build.sh
+++ b/scripts/readthedocs_build.sh
@@ -178,7 +178,7 @@ if [[ "${READTHEDOCS_PROJECT}" != "lizardbyte-gh-pages-main" ]]; then
   artifact_url="https://nightly.link/${github_user}/${github_repo}/actions/runs/${check_run_id}/${site_artifact}"
 
   # download and extract the ZIP artifact
-  curl -sL "${artifact_url}" -o "${project_dir}/artifact.zip"
+  curl --proto '=https' -sL "${artifact_url}" -o "${project_dir}/artifact.zip"
   7z x "${project_dir}/artifact.zip" -o"${project_dir}"
   rm "${project_dir}/artifact.zip"