forked from mirrors/jj
af76631021
The new code scanner is complaining that actions have permissions to do too much. It wasn't obvious to me what permissions the jobs need, but let's see how this works.
25 lines
521 B
YAML
25 lines
521 B
YAML
name: Nix on Linux
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
pull_request:
|
|
|
|
permissions: read-all
|
|
|
|
jobs:
|
|
nix:
|
|
runs-on: ubuntu-latest
|
|
name: nix-build
|
|
timeout-minutes: 20
|
|
steps:
|
|
- uses: actions/checkout@v2
|
|
with:
|
|
fetch-depth: 0
|
|
- uses: cachix/install-nix-action@v14.1
|
|
with:
|
|
extra_nix_config: |
|
|
experimental-features = nix-command flakes
|
|
- run: nix flake check --print-build-logs --show-trace --override-input nixpkgs github:NixOS/nixpkgs
|