From 83fcfe791616bd3243745ef8ded73cdfa4218041 Mon Sep 17 00:00:00 2001 From: Jo Date: Mon, 28 Jul 2025 21:24:10 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=91=B7=20Nix=20->=20Lix,=20and=20scan=20m?= =?UTF-8?q?ore=20file=20types=20for=20exposed=20secrets?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/actions/install-lix/action.yml | 2 +- .github/workflows/check-leaks.yml | 2 ++ .github/workflows/deadnix.yml | 4 ++-- .github/workflows/validate.yml | 5 +---- 4 files changed, 6 insertions(+), 7 deletions(-) diff --git a/.github/actions/install-lix/action.yml b/.github/actions/install-lix/action.yml index c41afc1..3e0ffac 100644 --- a/.github/actions/install-lix/action.yml +++ b/.github/actions/install-lix/action.yml @@ -1,4 +1,4 @@ -# Taken from: https://github.com/isabelroses/dotfiles/blob/9335e5728eaaa9bdcb0d5c3130a5d7c8dddbb6e3/.github/actions/install-lix/action.yml :3 +# Derived from: https://github.com/isabelroses/dotfiles/blob/9335e5728eaaa9bdcb0d5c3130a5d7c8dddbb6e3/.github/actions/install-lix/action.yml :3 name: Install Lix description: "Install Lix for the specified system" diff --git a/.github/workflows/check-leaks.yml b/.github/workflows/check-leaks.yml index 08d6f1f..244096b 100644 --- a/.github/workflows/check-leaks.yml +++ b/.github/workflows/check-leaks.yml @@ -7,6 +7,8 @@ on: paths: - "**.nix" - ".github/workflows/check-leaks.yml" + - "**.yaml" + - "**.md" permissions: contents: read diff --git a/.github/workflows/deadnix.yml b/.github/workflows/deadnix.yml index e7a32dd..b4e5211 100644 --- a/.github/workflows/deadnix.yml +++ b/.github/workflows/deadnix.yml @@ -14,8 +14,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@main - - - name: Install lix + + - name: Install Lix uses: ./.github/actions/install-lix - uses: phucleeuwu/deadnix-action@v1 diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index 4f3e1b3..05c56a9 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -16,11 +16,8 @@ jobs: steps: - name: Checkout uses: actions/checkout@v4 - with: - ref: ${{ github.ref_name }} - persist-credentials: false - - name: Install Nix + - name: Install Lix uses: ./.github/actions/install-lix - name: Validate Flake