Compare commits

...

4 commits

Author SHA1 Message Date
Graham Christensen
c115b81c59
Merge pull request #187 from DeterminateSystems/grahamc-patch-1
Some checks failed
CI / typescript-action (push) Has been cancelled
CI / validate (push) Has been cancelled
Fixup workflow name
2025-05-28 11:01:29 -04:00
Graham Christensen
2ca76c3436
Fixup workflow name 2025-05-28 10:52:49 -04:00
Graham Christensen
a3640124cb
Merge pull request #186 from DeterminateSystems/push-yonuoxmrqwmz
Update the readme to account for minimum mandatory permissions
2025-05-28 10:10:46 -04:00
Graham Christensen
5681a56ca1 Update the readme to account for minimum mandatory permissions 2025-05-28 09:52:01 -04:00

View file

@ -11,7 +11,7 @@ This is a GitHub Action that updates the [`flake.lock`][lockfile] file for your
Here's an example GitHub Action workflow using this Action: Here's an example GitHub Action workflow using this Action:
```yaml ```yaml
name: update-flake-lock name: "Flake.lock: update Nix dependencies"
on: on:
workflow_dispatch: # allows manual triggering workflow_dispatch: # allows manual triggering
@ -19,17 +19,19 @@ on:
- cron: '0 0 * * 0' # runs weekly on Sunday at 00:00 - cron: '0 0 * * 0' # runs weekly on Sunday at 00:00
jobs: jobs:
lockfile: nix-flake-update:
permissions:
contents: write
id-token: write
issues: write
pull-requests: write
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout repository - uses: actions/checkout@v4
uses: actions/checkout@v4 - uses: DeterminateSystems/determinate-nix-action@v3
- name: Install Determinate Nix - uses: DeterminateSystems/update-flake-lock@main
uses: DeterminateSystems/determinate-nix-action@v3
- name: Update flake.lock
uses: DeterminateSystems/update-flake-lock@main
with: with:
pr-title: "Update flake.lock" # Title of PR to be created pr-title: "Update Nix flake inputs" # Title of PR to be created
pr-labels: | # Labels to be set on the PR pr-labels: | # Labels to be set on the PR
dependencies dependencies
automated automated