nix-security-tracker/.github/workflows/bump.yaml at 48bcc0d0d81f6d290e39b942cd2d1e8cb749e29a · NixOS/nix-security-tracker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
name: Weekly npins update

on:
  schedule:
    # run at 00:00 UTC every Monday
    - cron: "0 0 * * 1"
  # allow manual trigger
  workflow_dispatch:

permissions:
  contents: write
  pull-requests: write
  actions: write

jobs:
  update-npins:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: cachix/install-nix-action@v29
      - run: |
          nix-shell default.nix -A ci --run "npins update"
      - uses: actions/create-github-app-token@v1
        id: generate-token
        with:
          app-id: ${{ secrets.APP_ID }}
          private-key: ${{ secrets.APP_PRIVATE_KEY }}
      - uses: peter-evans/create-pull-request@v7
        with:
          token: ${{ steps.generate-token.outputs.token }}
          commit-message: "chore: npins update"
          title: "chore: weekly npins update"
          body: |
            Automatic npins update performed by GitHub Actions
          branch: npins-auto-update
          delete-branch: true
          base: main