chore(work): add additional env entries for login shell #210
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Build System Configuration" | |
| on: | |
| pull_request: | |
| push: | |
| jobs: | |
| tests: | |
| runs-on: macos-15 | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| submodules: true | |
| - uses: cachix/install-nix-action@v31 | |
| with: | |
| extra_nix_config: "access-tokens = github.com=${{ secrets.TOKEN }}" | |
| - name: install git-crypt on the runner via nix flakes | |
| run: nix profile install nixpkgs#git-crypt | |
| - name: provide and temporarily unlock secrets as preparation for nix build | |
| run: | | |
| echo "$GIT_CRYPT_KEY" | base64 -d > ./git-crypt-key && \ | |
| git-crypt unlock ./git-crypt-key && \ | |
| rm ./git-crypt-key | |
| env: | |
| GIT_CRYPT_KEY: ${{ secrets.GIT_CRYPT_KEY }} | |
| - name: create dirty git worktree to omit git-crypt errors with flakes | |
| run: echo " " >> flake.nix # | |
| - name: build darwinConfiguration for apple silicon | |
| run: nix build '.?submodules=1#darwinConfigurations.m1.system' | |
| - name: validate nix flake | |
| run: nix flake check |