Related: https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017
27 lines
766 B
YAML
27 lines
766 B
YAML
name: Setup Nix
|
|
|
|
description: Installs nix, sets up cachix and installs a subset of tooling.
|
|
|
|
inputs:
|
|
authToken:
|
|
description: Token to pass to cachix
|
|
tools:
|
|
description: Tools to install with nix-env -iA <tools>
|
|
|
|
runs:
|
|
using: composite
|
|
steps:
|
|
- uses: nixbuild/nix-quick-install-action@63ca48f939ee3b8d835f4126562537df0fee5b91 # v32
|
|
with:
|
|
nix_conf: |-
|
|
always-allow-substitutes = true
|
|
max-jobs = auto
|
|
- uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad # v16
|
|
with:
|
|
name: postgrest
|
|
authToken: ${{ inputs.authToken }}
|
|
skipPush: ${{ inputs.authToken == '' }}
|
|
- if: ${{ inputs.tools }}
|
|
run: nix-env -f default.nix -iA ${{ inputs.tools }}
|
|
shell: bash
|