jj/.github/workflows/nix-linux.yml

name: Nix on Linux

on:
  push:
    branches:
      - master
  pull_request:

permissions: read-all

jobs:
  nix:
    runs-on: ubuntu-latest
    name: nix-build
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@v2
        with:
          fetch-depth: 0
      - uses: cachix/install-nix-action@v14.1
        with:
          extra_nix_config: |
            experimental-features = nix-command flakes
      - run: nix flake check --print-build-logs --show-trace --override-input nixpkgs github:NixOS/nixpkgs
Add nix check workflow 2022-02-20 20:48:51 +00:00			`name: Nix on Linux`

			`on:`
			`push:`
			`branches:`
			`- master`
			`pull_request:`

github: set top-level permissions to readonly for all workflows The new code scanner is complaining that actions have permissions to do too much. It wasn't obvious to me what permissions the jobs need, but let's see how this works. 2022-03-16 19:18:01 +00:00			`permissions: read-all`

Add nix check workflow 2022-02-20 20:48:51 +00:00			`jobs:`
			`nix:`
			`runs-on: ubuntu-latest`
			`name: nix-build`
			`timeout-minutes: 20`
			`steps:`
			`- uses: actions/checkout@v2`
			`with:`
			`fetch-depth: 0`
			`- uses: cachix/install-nix-action@v14.1`
			`with:`
			`extra_nix_config: \|`
			`experimental-features = nix-command flakes`
			`- run: nix flake check --print-build-logs --show-trace --override-input nixpkgs github:NixOS/nixpkgs`