I am building a GitHub pages site with a custom domain, and I have set the baseURL value in both a hugo.toml file and as a second attempt, in a config.toml just in case. Neither has fixed this error where the page is trying to load the theme/JS files from http and I see this in the dev tools console:
Mixed Content: The page at 'https://www.will-code-for-pay.com/' was loaded over HTTPS, but requested an insecure stylesheet 'http://www.will-code-for-pay.com/theme.min.4a7adaae74bbfed8a1bc02779a28cb26bed20f704048301344690c44af008313.css'. This request has been blocked; the content must be served over HTTPS.
When in doubt, unplug it, wait a minute, and plug it back in! Unpublishing it and rerunning the workflow did the trick, I didn’t check the “Enforce HTTPS” option until after the first time it was published, somehow that value didn’t get changed with subsequent runs. Thanks for your help.