jj/.github/workflows/nix-linux.yml

name: Nix on Linux

on:
  push:
    branches:
      - main
  pull_request:

permissions: read-all

jobs:
  nix:
    runs-on: ubuntu-latest
    name: nix-build
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3
        with:
          fetch-depth: 0
      - uses: cachix/install-nix-action@29bd9290ef037a3ecbdafe83cbd2185e9dd0fa0a
        with:
          extra_nix_config: |
            experimental-features = nix-command flakes
      - run: nix flake check --print-build-logs --show-trace
Add nix check workflow 2022-02-20 20:48:51 +00:00			`name: Nix on Linux`

			`on:`
			`push:`
			`branches:`
github: trigger all builds on main branch, and PR for any branch The conditions for triggering Nix builds and other builds were slightly different. Nix builds triggered by PRs happened on PRs for any branch, not just the `main` branch. That makes very little difference in practice because PRs for other branches are very rare. Still, let's be consistent. I decided to trigger the builds on PRs for any branch. More importantly, Nix builds triggered by push were only done for pushes to `master`, which is not what our main branch is called, so those never happened. 2022-05-06 16:03:56 +00:00			`- main`
Add nix check workflow 2022-02-20 20:48:51 +00:00			`pull_request:`

github: set top-level permissions to readonly for all workflows The new code scanner is complaining that actions have permissions to do too much. It wasn't obvious to me what permissions the jobs need, but let's see how this works. 2022-03-16 19:18:01 +00:00			`permissions: read-all`

Add nix check workflow 2022-02-20 20:48:51 +00:00			`jobs:`
			`nix:`
			`runs-on: ubuntu-latest`
			`name: nix-build`
			`timeout-minutes: 20`
			`steps:`
github: bump actions/checkout from 3.4.0 to 3.5.0 Bumps [actions/checkout](https://github.com/actions/checkout) from 3.4.0 to 3.5.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/24cb9080177205b6e8c946b17badbe402adc938f...8f4b7f84864484a7bf31766abe9204da3cbe65b3) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> 2023-03-24 16:01:01 +00:00			`- uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3`
Add nix check workflow 2022-02-20 20:48:51 +00:00			`with:`
			`fetch-depth: 0`
github: bump cachix/install-nix-action from 19 to 20 Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 19 to 20. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/5c11eae19dba042788936d4f1c9685fdd814ac49...29bd9290ef037a3ecbdafe83cbd2185e9dd0fa0a) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> 2023-03-01 16:04:17 +00:00			`- uses: cachix/install-nix-action@29bd9290ef037a3ecbdafe83cbd2185e9dd0fa0a`
Add nix check workflow 2022-02-20 20:48:51 +00:00			`with:`
			`extra_nix_config: \|`
			`experimental-features = nix-command flakes`
github: don't override nixpkgs version (use the lock file's version) I don't know what it was overridden here, but it meant that CI didn't notice that the package was broken (#299). 2022-05-05 15:36:59 +00:00			`- run: nix flake check --print-build-logs --show-trace`