From ec978a406d5039abbe471edb24972e3f8f50f1d4 Mon Sep 17 00:00:00 2001 From: cy Date: Sun, 30 Mar 2025 09:55:07 -0400 Subject: [PATCH 1/2] workflow: rm GITHUB_TOKEN from update-flake-lock --- .github/workflows/update-flake-lock.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/update-flake-lock.yml b/.github/workflows/update-flake-lock.yml index 59006f6..248b096 100644 --- a/.github/workflows/update-flake-lock.yml +++ b/.github/workflows/update-flake-lock.yml @@ -14,7 +14,5 @@ jobs: - uses: actions/checkout@v4 - name: Install Nix uses: cachix/install-nix-action@v30 - with: - github_access_token: ${{ secrets.GITHUB_TOKEN }} - name: Update flake.lock uses: DeterminateSystems/update-flake-lock@v24 From ed82c083abb55f66ee87199a9824797bcc2ae2aa Mon Sep 17 00:00:00 2001 From: cy Date: Sun, 30 Mar 2025 10:21:23 -0400 Subject: [PATCH 2/2] workflow: use deploy keys in update-flake-lock to trigger actions --- .github/workflows/update-flake-lock.yml | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/.github/workflows/update-flake-lock.yml b/.github/workflows/update-flake-lock.yml index 248b096..a45bd09 100644 --- a/.github/workflows/update-flake-lock.yml +++ b/.github/workflows/update-flake-lock.yml @@ -11,8 +11,15 @@ jobs: createPullRequest: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2 + with: + ssh-key; ${{ secrets.SSH_DEPLOY_KEY }} + - name: Install Nix - uses: cachix/install-nix-action@v30 + uses: cachix/install-nix-action@53fb48f556dd912c4814b24ee8059a9c91c82b18 + - name: Update flake.lock - uses: DeterminateSystems/update-flake-lock@v24 + run: nix flake update --commit-lock-file + + - name: Create PR + uses: peter-evans/create-pull-request@98106d3f2b65918a6591f9e155117b7219ff7e51