jj/.github/workflows/nix-linux.yml

name: Nix on Linux

on:
  push:
    branches:
      - main
  pull_request:

permissions: read-all

jobs:
  nix:
    runs-on: ubuntu-latest
    name: nix-build
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b
        with:
          fetch-depth: 0
      - uses: cachix/install-nix-action@daddc62a2e67d1decb56e028c9fa68344b9b7c2a
        with:
          extra_nix_config: |
            experimental-features = nix-command flakes
      - run: nix flake check --print-build-logs --show-trace
Add nix check workflow 2022-02-20 20:48:51 +00:00			`name: Nix on Linux`

			`on:`
			`push:`
			`branches:`
github: trigger all builds on main branch, and PR for any branch The conditions for triggering Nix builds and other builds were slightly different. Nix builds triggered by PRs happened on PRs for any branch, not just the `main` branch. That makes very little difference in practice because PRs for other branches are very rare. Still, let's be consistent. I decided to trigger the builds on PRs for any branch. More importantly, Nix builds triggered by push were only done for pushes to `master`, which is not what our main branch is called, so those never happened. 2022-05-06 16:03:56 +00:00			`- main`
Add nix check workflow 2022-02-20 20:48:51 +00:00			`pull_request:`

github: set top-level permissions to readonly for all workflows The new code scanner is complaining that actions have permissions to do too much. It wasn't obvious to me what permissions the jobs need, but let's see how this works. 2022-03-16 19:18:01 +00:00			`permissions: read-all`

Add nix check workflow 2022-02-20 20:48:51 +00:00			`jobs:`
			`nix:`
			`runs-on: ubuntu-latest`
			`name: nix-build`
			`timeout-minutes: 20`
			`steps:`
github: bump actions/checkout from 3.1.0 to 3.2.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 3.1.0 to 3.2.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8...755da8c3cf115ac066823e79a1e1788f8940201b) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> 2022-12-13 18:51:48 +00:00			`- uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b`
Add nix check workflow 2022-02-20 20:48:51 +00:00			`with:`
			`fetch-depth: 0`
github: bump cachix/install-nix-action from 17 to 18 Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 17 to 18. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/d64e0553100205688c0fb2fa16edb0fc8663c590...daddc62a2e67d1decb56e028c9fa68344b9b7c2a) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> 2022-10-12 15:31:02 +00:00			`- uses: cachix/install-nix-action@daddc62a2e67d1decb56e028c9fa68344b9b7c2a`
Add nix check workflow 2022-02-20 20:48:51 +00:00			`with:`
			`extra_nix_config: \|`
			`experimental-features = nix-command flakes`
github: don't override nixpkgs version (use the lock file's version) I don't know what it was overridden here, but it meant that CI didn't notice that the package was broken (#299). 2022-05-05 15:36:59 +00:00			`- run: nix flake check --print-build-logs --show-trace`