Netlify
We use Netlify to build and deploy https://cssbham.com/ and https://birminghack.com/. Login is done via GitHub SSO, whose credentials are in Vaultwarden.
Netlify will not deploy a failing build - so worst case if a PR is merged to the deployed branch and the build fails, the last successful build will remain deployed. This is handy in that the site will stay up despite a dodgy build being pushed to main, but also means that unless you specifically check the Netlify deploy status after a merge, a failing build can easily go unnoticed.