HASH b940df6af713
DATE 2025-01-19
SUBJECT ci: use github app
FILES 3 CHANGED
HASH b940df6af713
DATE 2025-01-19
SUBJECT ci: use github app
FILES 3 CHANGED
┌─ .github/workflows/check.yaml ─────────────────────────────────────────────┐
│ diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml │
│ index 1144aa3..c7d50b3 100644 │
│ --- a/.github/workflows/check.yaml │
│ +++ b/.github/workflows/check.yaml │
│ @@ -16,11 +16,24 @@ jobs: │
│ steps: │
│ - name: Checkout │
│ uses: actions/checkout@v4 │
│ + │
│ + - name: Generate GitHub App Token │
│ + id: generate-token │
│ + uses: actions/create-github-app-token@v1 │
│ + with: │
│ + app_id: ${{ vars.APP_ID }} │
│ + private_key: ${{ secrets.APP_PRIVATE_KEY }} │
│ + repositories: │
│ + │
│ + - name: Setup Git Config │
│ + run: | │
│ + git config --global url."https://x-access-token:${{ steps.app-token.out │
│ puts.token }}@github.com/".insteadOf "git+ssh://[email protected]/" │
│ + │
│ - name: Setup Nix │
│ uses: DeterminateSystems/nix-installer-action@main │
│ - with: │
│ - github-token: ${{ secrets.KUNZEN_TOKEN }} │
│ + │
│ - name: Magic Nix Cache │
│ uses: DeterminateSystems/magic-nix-cache-action@main │
│ + │
│ - name: Nix Flake │
│ run: nix flake check │
└────────────────────────────────────────────────────────────────────────────────────┘
┌─ .github/workflows/check.yaml ───────┐
│ diff --git a/.github/workflows/check.yaml b/ │
│ .github/workflows/check.yaml │
│ index 1144aa3..c7d50b3 100644 │
│ --- a/.github/workflows/check.yaml │
│ +++ b/.github/workflows/check.yaml │
│ @@ -16,11 +16,24 @@ jobs: │
│ steps: │
│ - name: Checkout │
│ uses: actions/checkout@v4 │
│ + │
│ + - name: Generate GitHub App Token │
│ + id: generate-token │
│ + uses: actions/create-github-app-tok │
│ en@v1 │
│ + with: │
│ + app_id: ${{ vars.APP_ID }} │
│ + private_key: ${{ secrets.APP_PRIV │
│ ATE_KEY }} │
│ + repositories: │
│ + │
│ + - name: Setup Git Config │
│ + run: | │
│ + git config --global url."https:// │
│ x-access-token:${{ steps.app-token.outputs.t │
│ oken }}@github.com/".insteadOf "git+ssh://gi │
│ [email protected]/" │
│ + │
│ - name: Setup Nix │
│ uses: DeterminateSystems/nix-instal │
│ ler-action@main │
│ - with: │
│ - github-token: ${{ secrets.KUNZEN_ │
│ TOKEN }} │
│ + │
│ - name: Magic Nix Cache │
│ uses: DeterminateSystems/magic-nix- │
│ cache-action@main │
│ + │
│ - name: Nix Flake │
│ run: nix flake check │
└──────────────────────────────────────────────┘
┌─ flake.lock ───────────────────────────────────────────────────────────────┐
│ diff --git a/flake.lock b/flake.lock │
│ index 154622e..ae36e2d 100644 │
│ --- a/flake.lock │
│ +++ b/flake.lock │
│ @@ -3093,11 +3093,11 @@ │
│ "rev": "dbbf390c798a14bb316681e62fe56355d9ea88f6", │
│ "revCount": 4, │
│ "type": "git", │
│ - "url": "https://[email protected]/ooks-io/kunzen" │
│ + "url": "ssh://[email protected]/ooks-io/kunzen" │
│ }, │
│ "original": { │
│ "type": "git", │
│ - "url": "https://[email protected]/ooks-io/kunzen" │
│ + "url": "ssh://[email protected]/ooks-io/kunzen" │
│ } │
│ }, │
│ "systems": { │
└────────────────────────────────────────────────────────────────────────────────────┘
┌─ flake.lock ─────────────────────────┐
│ diff --git a/flake.lock b/flake.lock │
│ index 154622e..ae36e2d 100644 │
│ --- a/flake.lock │
│ +++ b/flake.lock │
│ @@ -3093,11 +3093,11 @@ │
│ "rev": "dbbf390c798a14bb316681e62fe │
│ 56355d9ea88f6", │
│ "revCount": 4, │
│ "type": "git", │
│ - "url": "https://[email protected]/ooks │
│ -io/kunzen" │
│ + "url": "ssh://[email protected]/ooks-i │
│ o/kunzen" │
│ }, │
│ "original": { │
│ "type": "git", │
│ - "url": "https://[email protected]/ooks │
│ -io/kunzen" │
│ + "url": "ssh://[email protected]/ooks-i │
│ o/kunzen" │
│ } │
│ }, │
│ "systems": { │
└──────────────────────────────────────────────┘
┌─ flake.nix ────────────────────────────────────────────────────────────────┐
│ diff --git a/flake.nix b/flake.nix │
│ index e41b9f8..0034cd4 100644 │
│ --- a/flake.nix │
│ +++ b/flake.nix │
│ @@ -51,8 +51,7 @@ │
│ }; │
│ │
│ secrets = { │
│ - url = "git+https://[email protected]/ooks-io/kunzen"; │
│ - allRefs = true; │
│ + url = "git+ssh://[email protected]/ooks-io/kunzen"; │
│ inputs = { │
│ nixpkgs.follows = "nixpkgs"; │
│ flake-parts.follows = "flake-parts"; │
└────────────────────────────────────────────────────────────────────────────────────┘
┌─ flake.nix ──────────────────────────┐
│ diff --git a/flake.nix b/flake.nix │
│ index e41b9f8..0034cd4 100644 │
│ --- a/flake.nix │
│ +++ b/flake.nix │
│ @@ -51,8 +51,7 @@ │
│ }; │
│ │
│ secrets = { │
│ - url = "git+https://[email protected]/ook │
│ s-io/kunzen"; │
│ - allRefs = true; │
│ + url = "git+ssh://[email protected]/ooks- │
│ io/kunzen"; │
│ inputs = { │
│ nixpkgs.follows = "nixpkgs"; │
│ flake-parts.follows = "flake-parts" │
│ ; │
└──────────────────────────────────────────────┘
[ BACK TO LOG ]
──────────────────────────────────────────────────────────────────────────────────────
OOKNET
────────────────────────────────────────────────
OOKNET