pin workflows by sha

This commit is contained in:
cy 2025-05-11 01:04:15 -04:00
parent 2b52792959
commit a995716212
3 changed files with 11 additions and 8 deletions

View file

@ -25,7 +25,7 @@ jobs:
run: echo -n "${{ secrets.NIX_CACHE_SECRET_KEY }}" | xxd -p -r > ${{ runner.temp }}/cache-priv-key.pem run: echo -n "${{ secrets.NIX_CACHE_SECRET_KEY }}" | xxd -p -r > ${{ runner.temp }}/cache-priv-key.pem
- name: Install Nix - name: Install Nix
uses: cachix/install-nix-action@v30 uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641
with: with:
enable_kvm: true enable_kvm: true
extra_nix_config: | extra_nix_config: |
@ -35,8 +35,7 @@ jobs:
extra-substituters = https://nixcache.cy7.sh extra-substituters = https://nixcache.cy7.sh
extra-trusted-public-keys = nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8= extra-trusted-public-keys = nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8=
- name: Sync repository - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2
uses: actions/checkout@v4
with: with:
persist-credentials: false persist-credentials: false
@ -54,7 +53,7 @@ jobs:
run: nix run github:nixos/nixpkgs#gnutar hcvf result.tar result run: nix run github:nixos/nixpkgs#gnutar hcvf result.tar result
- name: upload result - name: upload result
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@6027e3dd177782cd8ab9af838c04fd81a07f1d47
with: with:
name: ${{ matrix.os }}.tar name: ${{ matrix.os }}.tar
path: result.tar path: result.tar

View file

@ -10,7 +10,7 @@ jobs:
steps: steps:
- name: Install Nix - name: Install Nix
uses: cachix/install-nix-action@v30 uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641
with: with:
enable_kvm: true enable_kvm: true
extra_nix_config: | extra_nix_config: |
@ -19,7 +19,9 @@ jobs:
extra-substituters = https://nixcache.cy7.sh extra-substituters = https://nixcache.cy7.sh
extra-trusted-public-keys = nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8= extra-trusted-public-keys = nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8=
- uses: actions/checkout@v4 - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2
with:
persist-credentials: false
- name: Run checks - name: Run checks
run: nix flake check -L run: nix flake check -L

View file

@ -13,7 +13,7 @@ jobs:
steps: steps:
- name: Install Nix - name: Install Nix
uses: cachix/install-nix-action@v30 uses: cachix/install-nix-action@526118121621777ccd86f79b04685a9319637641
with: with:
enable_kvm: true enable_kvm: true
extra_nix_config: | extra_nix_config: |
@ -22,7 +22,9 @@ jobs:
extra-substituters = https://nixcache.cy7.sh extra-substituters = https://nixcache.cy7.sh
extra-trusted-public-keys = nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8= extra-trusted-public-keys = nixcache.cy7.sh:DN3d1dt0wnXfTH03oVmTee4KgmdNdB0NY3SuzA8Fwx8=
- uses: actions/checkout@v4 - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2
with:
persist-credentials: false
- name: Run tests - name: Run tests
run: nix develop -c cargo test --verbose run: nix develop -c cargo test --verbose