jj/.github/workflows/nix-update-flake.yml
Martin von Zweigbergk 23a2e70625 github: avoid using tags in action version specifiers
The security scanner doesn't like depending on a tag version (because
tags can be moved).
2024-01-16 07:23:11 -08:00

23 lines
741 B
YAML

name: Update nix flake.lock
on:
workflow_dispatch: # allows manual triggering
schedule:
- cron: '40 3 * * 0' # runs weekly on Sunday at 03:40
jobs:
lockfile:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
- name: Install Nix
uses: DeterminateSystems/nix-installer-action@cd46bde16ab981b0a7b2dce0574509104543276e
- name: Update flake.lock
uses: DeterminateSystems/update-flake-lock@da2fd6f2563fe3e4f2af8be73b864088564e263d
with:
pr-title: "nix: update flake.lock"
pr-assignees: thoughtpolice
pr-reviewers: thoughtpolice
pr-labels: |
dependencies