mirror of
https://github.com/DeterminateSystems/determinate-nix-action.git
synced 2026-02-24 22:57:12 +00:00
Add note about permissions block
This commit is contained in:
parent
44b49325b1
commit
769948d798
2 changed files with 22 additions and 8 deletions
|
|
@ -36,6 +36,8 @@ Based on the [Determinate Nix Installer](https://github.com/DeterminateSystems/n
|
|||
|
||||
## ️🔧 Usage
|
||||
|
||||
Here's an example Actions workflow configuration that uses `determinate-nix-action`:
|
||||
|
||||
```yaml
|
||||
on:
|
||||
pull_request:
|
||||
|
|
@ -43,18 +45,21 @@ on:
|
|||
branches: [main]
|
||||
|
||||
jobs:
|
||||
lints:
|
||||
name: Build
|
||||
build-pkg:
|
||||
name: Build Nix package
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
id-token: "write"
|
||||
contents: "read"
|
||||
id-token: write
|
||||
contents: read
|
||||
steps:
|
||||
- uses: actions/checkout@<!-- checkout_action_tag -->
|
||||
- uses: DeterminateSystems/determinate-nix-action@main # or <!-- version --> to pin to a release
|
||||
- run: nix build .
|
||||
```
|
||||
|
||||
> [!IMPORTANT]
|
||||
> You must add a `permissions` block like the one in the example above or else Determinate Nix won't be able to authenticate with [FlakeHub].
|
||||
|
||||
## 📌 Version Pinning: Lock It Down!
|
||||
|
||||
### Why Pin Your Action?
|
||||
|
|
@ -102,3 +107,5 @@ We're committed to making your experience with Determinate Nix as smooth as poss
|
|||
- 📧 **Need direct support?** Email us at [support@determinate.systems](mailto:support@determinate.systems)
|
||||
|
||||
🤝 **Looking for enterprise support?** We offer dedicated support contracts and shared Slack channels for organizations requiring priority assistance. [Contact us](mailto:support@determinate.systems) to learn more.
|
||||
|
||||
[flakehub]: https//flakehub.com
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue