Update Nix installers in CI (#879)

TraceMachina · Apr 26, 2024 · 5a549ba · 5a549ba
1 parent f6e02a6
commit 5a549ba
Show file tree

Hide file tree

Showing 6 changed files with 30 additions and 49 deletions.
diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
@@ -29,15 +29,12 @@ jobs:
           actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Install Nix
-        uses: >- # v9
-          DeterminateSystems/nix-installer-action@cd46bde16ab981b0a7b2dce0574509104543276e
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          nix-installer-tag: v0.16.1
+        uses: >- # v10
+          DeterminateSystems/nix-installer-action@de22e16c4711fca50c816cc9081563429d1cf563
 
       - name: Cache Nix derivations
-        uses: >- # Custom commit, last pinned at 2024-03-03.
-          DeterminateSystems/magic-nix-cache-action@742d8701e54851d2136f71b61d31382a4f4d0788
+        uses: >- # v4
+          DeterminateSystems/magic-nix-cache-action@fc6aaceb40b9845a02b91e059ec147e78d1b4e41
 
       - name: Test image
         run: |

diff --git a/.github/workflows/lre.yaml b/.github/workflows/lre.yaml
@@ -24,15 +24,12 @@ jobs:
           actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Install Nix
-        uses: >- # v9
-          DeterminateSystems/nix-installer-action@cd46bde16ab981b0a7b2dce0574509104543276e
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          nix-installer-tag: v0.16.1
+        uses: >- # v10
+          DeterminateSystems/nix-installer-action@de22e16c4711fca50c816cc9081563429d1cf563
 
       - name: Cache Nix derivations
-        uses: >- # Custom commit, last pinned at 2024-03-03.
-          DeterminateSystems/magic-nix-cache-action@742d8701e54851d2136f71b61d31382a4f4d0788
+        uses: >- # v4
+          DeterminateSystems/magic-nix-cache-action@fc6aaceb40b9845a02b91e059ec147e78d1b4e41
 
       - name: Build hello_lre with LRE toolchain.
         run: >
@@ -55,15 +52,12 @@ jobs:
           actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Install Nix
-        uses: >- # v9
-          DeterminateSystems/nix-installer-action@cd46bde16ab981b0a7b2dce0574509104543276e
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          nix-installer-tag: v0.16.1
+        uses: >- # v10
+          DeterminateSystems/nix-installer-action@de22e16c4711fca50c816cc9081563429d1cf563
 
       - name: Cache Nix derivations
-        uses: >- # Custom commit, last pinned at 2024-03-03.
-          DeterminateSystems/magic-nix-cache-action@742d8701e54851d2136f71b61d31382a4f4d0788
+        uses: >- # v4
+          DeterminateSystems/magic-nix-cache-action@fc6aaceb40b9845a02b91e059ec147e78d1b4e41
 
       - name: Start Kubernetes cluster (Infra)
         run: >

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -7,6 +7,8 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions: read-all
+
 jobs:
   docker-compose-compiles-nativelink:
     # The type of runner that the job will run on.

diff --git a/.github/workflows/nix.yaml b/.github/workflows/nix.yaml
@@ -24,15 +24,12 @@ jobs:
           actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Install Nix
-        uses: >- # v9
-          DeterminateSystems/nix-installer-action@cd46bde16ab981b0a7b2dce0574509104543276e
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          nix-installer-tag: v0.16.1
+        uses: >- # v10
+          DeterminateSystems/nix-installer-action@de22e16c4711fca50c816cc9081563429d1cf563
 
       - name: Cache Nix derivations
-        uses: >- # Custom commit, last pinned at 2024-03-03.
-          DeterminateSystems/magic-nix-cache-action@742d8701e54851d2136f71b61d31382a4f4d0788
+        uses: >- # v4
+          DeterminateSystems/magic-nix-cache-action@fc6aaceb40b9845a02b91e059ec147e78d1b4e41
 
       # TODO(aaronmondal): Figure out why this cache breaks CI.
       # See: https://github.com/TraceMachina/nativelink/issues/772
@@ -70,15 +67,12 @@ jobs:
           actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Install Nix
-        uses: >- # v9
-          DeterminateSystems/nix-installer-action@cd46bde16ab981b0a7b2dce0574509104543276e
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          nix-installer-tag: v0.16.1
+        uses: >- # v10
+          DeterminateSystems/nix-installer-action@de22e16c4711fca50c816cc9081563429d1cf563
 
       - name: Cache Nix derivations
-        uses: >- # Custom commit, last pinned at 2024-03-03.
-          DeterminateSystems/magic-nix-cache-action@742d8701e54851d2136f71b61d31382a4f4d0788
+        uses: >- # v4
+          DeterminateSystems/magic-nix-cache-action@fc6aaceb40b9845a02b91e059ec147e78d1b4e41
 
       - name: Invoke Cargo build in Nix shell
         run: >

diff --git a/.github/workflows/pre-commit.yaml b/.github/workflows/pre-commit.yaml
@@ -19,15 +19,12 @@ jobs:
           actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Install Nix
-        uses: >- # v9
-          DeterminateSystems/nix-installer-action@cd46bde16ab981b0a7b2dce0574509104543276e
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          nix-installer-tag: v0.16.1
+        uses: >- # v10
+          DeterminateSystems/nix-installer-action@de22e16c4711fca50c816cc9081563429d1cf563
 
       - name: Cache Nix derivations
-        uses: >- # Custom commit, last pinned at 2024-03-03.
-          DeterminateSystems/magic-nix-cache-action@742d8701e54851d2136f71b61d31382a4f4d0788
+        uses: >- # v4
+          DeterminateSystems/magic-nix-cache-action@fc6aaceb40b9845a02b91e059ec147e78d1b4e41
 
       - name: Run pre-commit hooks
         run: nix flake check
diff --git a/.github/workflows/tagged_image.yaml b/.github/workflows/tagged_image.yaml
@@ -24,15 +24,12 @@ jobs:
           actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Install Nix
-        uses: >- # v9
-          DeterminateSystems/nix-installer-action@cd46bde16ab981b0a7b2dce0574509104543276e
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          nix-installer-tag: v0.16.1
+        uses: >- # v10
+          DeterminateSystems/nix-installer-action@de22e16c4711fca50c816cc9081563429d1cf563
 
       - name: Cache Nix derivations
-        uses: >- # Custom commit, last pinned at 2024-03-03.
-          DeterminateSystems/magic-nix-cache-action@742d8701e54851d2136f71b61d31382a4f4d0788
+        uses: >- # v4
+          DeterminateSystems/magic-nix-cache-action@fc6aaceb40b9845a02b91e059ec147e78d1b4e41
 
       - name: Test image
         run: |