chore(deps): update cachix/install-nix-action action to v29 #127
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: "Build System Configuration" | |
on: | |
pull_request: | |
push: | |
jobs: | |
tests: | |
runs-on: macos-14 | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
submodules: true | |
- uses: cachix/install-nix-action@v29 | |
with: | |
extra_nix_config: "access-tokens = github.com=${{ secrets.TOKEN }}" | |
- name: install git-crypt on the runner via nix flakes | |
run: nix profile install nixpkgs#git-crypt | |
- name: provide and temporarily unlock secrets as preparation for nix build | |
run: | | |
echo "$GIT_CRYPT_KEY" | base64 -d > ./git-crypt-key && \ | |
git-crypt unlock ./git-crypt-key && \ | |
rm ./git-crypt-key | |
env: | |
GIT_CRYPT_KEY: ${{ secrets.GIT_CRYPT_KEY }} | |
- name: create dirty git worktree to omit git-crypt errors with flakes | |
run: echo " " >> flake.nix # | |
- name: build darwinConfiguration for apple silicon | |
run: nix build '.?submodules=1#darwinConfigurations.m1.system' | |
- name: validate nix flake | |
run: nix flake check |