👷 Update CI actions to use Lix and fix trufflehog version

.github/workflows/build.yml

@@ -1,34 +0,0 @@
-name: "Nix: build and cache outputs"
-
-on:
-  workflow_dispatch:
-  push:
-    paths:
-      - "**.nix"
-      - "**.lock"
-      - ".github/workflows/build.yml"
-
-jobs:
-  build-flake:
-    name: Build (x86_64-linux)
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          ref: ${{ github.ref_name }}
-          persist-credentials: false
-
-      - name: Install Lix
-        uses: ./.github/actions/install-lix
-
-      - name: Setup Attic cache
-        uses: ryanccn/attic-action@v0.3.2
-        with:
-          endpoint: https://cache.thevoid.cafe
-          cache: puzzlevision
-          token: ${{ secrets.ATTIC_TOKEN }}
-
-      - name: Build flake
-        run: nix build .#nixosConfigurations.puzzlevision.config.system.build.toplevel --accept-flake-config

.github/workflows/check-leaks.yml

@@ -19,4 +19,4 @@ jobs:
           persist-credentials: false
 
       - name: TruffleHog scan
-        uses: trufflesecurity/trufflehog@v3.88
+        uses: trufflesecurity/trufflehog@v3.88.35

.github/workflows/deadnix.yml

@@ -12,9 +12,17 @@ jobs:
     name: Run deadnix
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout
-      - uses: cachix/install-nix-action@v25
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref_name }}
+          persist-credentials: false
+
+      - name: Install lix
+        uses: ./.github/actions/install-lix
+
       - uses: cachix/cachix-action@v14
         with:
           name: deadnix
+
       - uses: phucleeuwu/deadnix-action@v1

.github/workflows/validate.yml

@@ -6,7 +6,7 @@ on:
     paths:
       - "**.nix"
       - "**.lock"
-      - ".github/workflows/**.yml"
+      - ".github/workflows/validate.yml"
 
 jobs:
   check-flake:
@@ -21,10 +21,7 @@ jobs:
           persist-credentials: false
 
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@main
+        uses: ./.github/actions/install-lix
-        with:
-          extra-conf: |
-            experimental-features = flakes nix-command recursive-nix pipe-operator
 
       - name: Validate Flake
         run: nix flake check