aboutsummaryrefslogtreecommitdiff
path: root/.github/workflows
AgeCommit message (Collapse)Author
2022-08-29Only push Docker image when Docker secrets are setMichael Hoang
2022-08-28Update backport.ymlAlex
2022-07-05Fix the hydra_status CI jobThéophane Hufschmitt
2022-07-05Restrict the permissions of the CIThéophane Hufschmitt
2022-07-01chore: Set permissions for GitHub actionsnaveen
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-10Correctly get the nix version in the docker jobThéophane Hufschmitt
`defaultPackage` doesn't exist anymore, so we can't use it. Instead just use the new CLI which should be more robust to these changes Fix #6640
2022-05-23Bump zeebe-io/backport-action from 0.0.7 to 0.0.8dependabot[bot]
Bumps [zeebe-io/backport-action](https://github.com/zeebe-io/backport-action) from 0.0.7 to 0.0.8. - [Release notes](https://github.com/zeebe-io/backport-action/releases) - [Commits](https://github.com/zeebe-io/backport-action/compare/v0.0.7...v0.0.8) --- updated-dependencies: - dependency-name: zeebe-io/backport-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-05-09Bump docker/login-action from 1 to 2dependabot[bot]
Bumps [docker/login-action](https://github.com/docker/login-action) from 1 to 2. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v1...v2) --- updated-dependencies: - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-13Bump actions/checkout from 2 to 3dependabot[bot]
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-11build(deps): bump cachix/install-nix-action from 16 to 17dependabot[bot]
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 16 to 17. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v16...v17) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-01-26Use the `nix` command (and flakes) in the CIregnat
Apart from a slight simplification and a bit of dogfooding, this also make the cache behavior more predictable. For example `nix build .` and `nix build nix/$(git rev-parse HEAD)` will yield the exact same path, while their “intuitive” non-flake equivalents (`nix-build` and `nix-build https://github.com/nixos/nix/archives/$(git rev-parse HEAD).tar.gz`) don’t. This was a pain for example in https://github.com/NixOS/nix/pull/5059 Also, the `bar-with-logs` log format is imho nicer (even in an non-interactive context) because prefixing each log line with the name of the derivation that produced it makes it much easier to follow what’s going on.
2022-01-21also tagging with latest commit with a `master` tagRok Garbas
2022-01-11Push docker image (only x86_64-linux right now) to hub.docker.comRok Garbas
2022-01-11Rename github workflow from Tests to CIRok Garbas
2021-11-30Add a github cron to check the hydra statusregnat
Add a regular github action that will check the status of the latest hydra evaluation. Things aren’t ideal right now because this job will only notify “the user who last modified the cron syntax in the workflow file” (so myself atm). But at least that’ll give a notification for failing hydra jobs
2021-11-22Bump cachix/install-nix-action from 15 to 16dependabot[bot]
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 15 to 16. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v15...v16) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2021-11-18Merge pull request #5568 from ↵Eelco Dolstra
NixOS/dependabot/github_actions/cachix/install-nix-action-15 Bump cachix/install-nix-action from 14.1 to 15
2021-11-15Bump zeebe-io/backport-action from 0.0.5 to 0.0.7dependabot[bot]
Bumps [zeebe-io/backport-action](https://github.com/zeebe-io/backport-action) from 0.0.5 to 0.0.7. - [Release notes](https://github.com/zeebe-io/backport-action/releases) - [Commits](https://github.com/zeebe-io/backport-action/compare/v0.0.5...v0.0.7) --- updated-dependencies: - dependency-name: zeebe-io/backport-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-11-15Bump cachix/install-nix-action from 14.1 to 15dependabot[bot]
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 14.1 to 15. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v14.1...v15) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2021-11-15Add backport actionDomen Kožar
2021-11-08Bump actions/checkout from 2.3.5 to 2.4.0dependabot[bot]
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.5 to 2.4.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2.3.5...v2.4.0) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2021-11-02install-nix-actionv@v14.1Domen Kožar
2021-10-29Apply a 60-minute timeout to the 'tests' workflowEelco Dolstra
2021-10-18Bump actions/checkout from 2.3.4 to 2.3.5dependabot[bot]
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.4 to 2.3.5. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2.3.4...v2.3.5) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2021-09-14Bump cachix/install-nix-action from 13 to 14dependabot[bot]
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 13 to 14. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v13...v14) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2021-09-01fix CI for users with no installer-test cachixTravis A. Everett
Closes #5173
2021-06-28github actions: simplify getting the system logicDomen Kožar
2021-04-12Bump cachix/cachix-action from v9 to v10dependabot[bot]
Bumps [cachix/cachix-action](https://github.com/cachix/cachix-action) from v9 to v10. - [Release notes](https://github.com/cachix/cachix-action/releases) - [Commits](https://github.com/cachix/cachix-action/compare/v9...73e75d1a0cd4330597a571e8f9dedb41faa2fc4e) Signed-off-by: dependabot[bot] <support@github.com>
2021-04-03bump actionsDomen Kožar
2021-02-26simplify changing cachix cache for install testsTravis A. Everett
- convert cachix cache name from an env into a secret so it (along with the token/key) can be set once per fork - use CACHIX_AUTH_TOKEN in addition to CACHIX_SIGNING_KEY; it looks like cachix will try signing key first, then auth token.
2021-02-21Generate installer script for each PR/pushDomen Kožar
This works by using Cachix feature of serving a file from a store path.
2020-11-09Bump cachix/install-nix-action from v11 to v12 (#4237)dependabot[bot]
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from v11 to v12. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v11...07da2520eebede906fbeefa9dd0a2b635323909d) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-09-28Update .github/workflows/test.ymlDomen Kožar
2020-09-28Update .github/workflows/test.ymlDomen Kožar
2020-09-28Bump cachix/install-nix-action from v10 to v11dependabot[bot]
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from v10 to v11. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v10...95a8068e317b8def9482980abe762f36c77ccc99) Signed-off-by: dependabot[bot] <support@github.com>
2020-08-30speed up CIDomen Kožar
2020-07-06Merge remote-tracking branch 'origin/master' into flakesEelco Dolstra
2020-06-28Bump cachix/install-nix-action from v8 to v10dependabot[bot]
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from v8 to v10. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v8...63cf434de4e4292c6960639d56c5dd550e789d77) Signed-off-by: dependabot[bot] <support@github.com>
2020-05-28Merge remote-tracking branch 'origin/master' into flakesEelco Dolstra
2020-05-15actions: use latest OSDomen Kožar
2020-03-13Do a deep fetchEelco Dolstra
Currently the build fails with warning: reject refs/heads/HEAD because shallow roots are not allowed to be updated error: Could not read 0c2088d4386a350f0005ff1a278d0384dbc26881 fatal: Failed to traverse parents of commit ea1803efdc288a400b544e7f1f2d83efdd2792b6 error: program 'git' failed with exit code 128
2020-03-13Run checksEelco Dolstra
2020-03-13Remove build and binaryTarball since they're included in installerScriptEelco Dolstra
2020-03-13Add CI with github actionsDomen Kožar