jj/.github/workflows/nix-linux.yml

name: Nix on Linux

on:
  push:
    branches:
      - master
  pull_request:

permissions: read-all

jobs:
  nix:
    runs-on: ubuntu-latest
    name: nix-build
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
        with:
          fetch-depth: 0
      - uses: cachix/install-nix-action@d56f3ce9be45c562799280e8a561fbbe8f36de44
        with:
          extra_nix_config: |
            experimental-features = nix-command flakes
      - run: nix flake check --print-build-logs --show-trace --override-input nixpkgs github:NixOS/nixpkgs
Add nix check workflow 2022-02-20 20:48:51 +00:00			`name: Nix on Linux`

			`on:`
			`push:`
			`branches:`
			`- master`
			`pull_request:`

github: set top-level permissions to readonly for all workflows The new code scanner is complaining that actions have permissions to do too much. It wasn't obvious to me what permissions the jobs need, but let's see how this works. 2022-03-16 19:18:01 +00:00			`permissions: read-all`

Add nix check workflow 2022-02-20 20:48:51 +00:00			`jobs:`
			`nix:`
			`runs-on: ubuntu-latest`
			`name: nix-build`
			`timeout-minutes: 20`
			`steps:`
github: pin `actions/checkout` version by hash 2022-03-17 03:58:04 +00:00			`- uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846`
Add nix check workflow 2022-02-20 20:48:51 +00:00			`with:`
			`fetch-depth: 0`
github: pin `cachix/install-nix-action` version by hash 2022-03-17 16:01:17 +00:00			`- uses: cachix/install-nix-action@d56f3ce9be45c562799280e8a561fbbe8f36de44`
Add nix check workflow 2022-02-20 20:48:51 +00:00			`with:`
			`extra_nix_config: \|`
			`experimental-features = nix-command flakes`
			`- run: nix flake check --print-build-logs --show-trace --override-input nixpkgs github:NixOS/nixpkgs`