Skip to content

chore(nix): update flake.lock #19

chore(nix): update flake.lock

chore(nix): update flake.lock #19

Workflow file for this run

name: Merge PR
on:
pull_request:
types:
- closed
# - synchronize
concurrency:
group: merge
cancel-in-progress: false
permissions:
contents: read
jobs:
build-docker:

Check failure on line 13 in .github/workflows/merge.yaml

View workflow run for this annotation

GitHub Actions / Merge PR

Invalid workflow file

The workflow is not valid. .github/workflows/merge.yaml (Line: 13, Col: 3): Error calling workflow 'hoprnet/hopr-workflows/.github/workflows/build-docker-image.yaml@build-docker-image-v1'. The nested job 'scan' is requesting 'security-events: write, id-token: write', but is only allowed 'security-events: none, id-token: none'.
name: Docker ${{ matrix.architecture }}
if: github.event.pull_request.merged == true
uses: hoprnet/hopr-workflows/.github/workflows/build-docker-image.yaml@build-docker-image-v1
strategy:
matrix:
include:
- architecture: x86_64-linux
command: nix run -L .#hopli-docker-build-and-upload
permissions:
contents: read
with:
source_branch: ${{ github.event.pull_request.base.ref }}
version_type: "pr"
architecture: ${{ matrix.architecture }}
cachix_cache_name: "hopli"
build_file: "Cargo.toml"
build_command: ${{ matrix.command }}
docker_image_name: "hopli"
secrets:
gcp_service_account: ${{ secrets.GOOGLE_HOPRASSOCIATION_CREDENTIALS_REGISTRY}}
cachix_auth_token: ${{ secrets.CACHIX_AUTH_TOKEN }}
docker_hub_username: ${{ secrets.DOCKER_HUB_USERNAME }}
docker_hub_token: ${{ secrets.DOCKER_HUB_TOKEN }}
build-docker-manifest:
if: github.event.pull_request.merged == true
name: Docker manifest
needs: build-docker
uses: hoprnet/hopr-workflows/.github/workflows/build-docker-manifest.yaml@build-docker-manifest-v1
permissions:
contents: read
with:
version_type: "pr"
docker_image_name: "hopli"
docker_build_version: ${{ needs.build-docker.outputs.docker_build_version }}
docker_debug_version: ${{ needs.build-docker.outputs.docker_debug_version }}
secrets:
gcp_service_account: ${{ secrets.GOOGLE_HOPRASSOCIATION_CREDENTIALS_REGISTRY}}
docker_hub_username: ${{ secrets.DOCKER_HUB_USERNAME }}
docker_hub_token: ${{ secrets.DOCKER_HUB_TOKEN }}
build-binaries:
name: Binary ${{ matrix.architecture }}
if: github.event.pull_request.merged == true
strategy:
fail-fast: false
matrix:
include:
- architecture: x86_64-linux
runner: self-hosted-hoprnet-bigger
build_command: nix build -L .#hopli-x86_64-linux
uses: hoprnet/hopr-workflows/.github/workflows/build-binaries.yaml@build-binaries-v1
permissions:
contents: read
with:
source_branch: ${{ github.event.pull_request.base.ref }}
version_type: "pr"
architecture: ${{ matrix.architecture }}
cachix_cache_name: "hopli"
build_file: "Cargo.toml"
build_command: ${{ matrix.build_command }}
binary: hopli
runner: ${{ matrix.runner }}
secrets:
gcp_service_account: ${{ secrets.GOOGLE_HOPRASSOCIATION_CREDENTIALS_REGISTRY}}
cachix_auth_token: ${{ secrets.CACHIX_AUTH_TOKEN }}
gpg_private_key: ${{ secrets.GPG_HOPRNET_PRIVATE_KEY }}