git.iko.soy/typeable/nixpkgs
on master help sign in
.github/workflows: build NixOS/Nixpkgs manuals with PR ref, restrict-eval and sandbox
84b5775zowoq
.github/workflows/manual-nixos.ymlnew file+28
compare with master
unifiedsplit
@@ -0,0 +1,28 @@
1+name: "Build NixOS manual"
2+
3+on:
4+ pull_request_target:
5+ branches:
6+ - master
7+ paths:
8+ - 'nixos/**'
9+
10+jobs:
11+ nixos:
12+ runs-on: ubuntu-latest
13+ steps:
14+ - uses: actions/checkout@v2
15+ with:
16+ # pull_request_target checks out the base branch by default
17+ ref: refs/pull/${{ github.event.pull_request.number }}/merge
18+ - uses: cachix/install-nix-action@v12
19+ with:
20+ # explicitly enable sandbox
21+ extra_nix_config: sandbox = true
22+ - uses: cachix/cachix-action@v8
23+ with:
24+ # This cache is for the nixos/nixpkgs manual builds and should not be trusted or used elsewhere.
25+ name: nixpkgs-ci
26+ signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
27+ - name: Building NixOS manual
28+ run: nix-build --option restrict-eval true nixos/release.nix -A manual.x86_64-linux
.github/workflows/manual-nixpkgs.ymlnew file+28
@@ -0,0 +1,28 @@
1+name: "Build Nixpkgs manual"
2+
3+on:
4+ pull_request_target:
5+ branches:
6+ - master
7+ paths:
8+ - 'doc/**'
9+
10+jobs:
11+ nixpkgs:
12+ runs-on: ubuntu-latest
13+ steps:
14+ - uses: actions/checkout@v2
15+ with:
16+ # pull_request_target checks out the base branch by default
17+ ref: refs/pull/${{ github.event.pull_request.number }}/merge
18+ - uses: cachix/install-nix-action@v12
19+ with:
20+ # explicitly enable sandbox
21+ extra_nix_config: sandbox = true
22+ - uses: cachix/cachix-action@v8
23+ with:
24+ # This cache is for the nixos/nixpkgs manual builds and should not be trusted or used elsewhere.
25+ name: nixpkgs-ci
26+ signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
27+ - name: Building Nixpkgs manual
28+ run: nix-build --option restrict-eval true pkgs/top-level/release.nix -A manual