Update the readme to account for minimum mandatory permissions
This commit is contained in:
parent
428c2b58a4
commit
5681a56ca1
20
README.md
20
README.md
@ -11,7 +11,7 @@ This is a GitHub Action that updates the [`flake.lock`][lockfile] file for your
|
|||||||
Here's an example GitHub Action workflow using this Action:
|
Here's an example GitHub Action workflow using this Action:
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
name: update-flake-lock
|
name: Flake.lock: update Nix dependencies
|
||||||
|
|
||||||
on:
|
on:
|
||||||
workflow_dispatch: # allows manual triggering
|
workflow_dispatch: # allows manual triggering
|
||||||
@ -19,17 +19,19 @@ on:
|
|||||||
- cron: '0 0 * * 0' # runs weekly on Sunday at 00:00
|
- cron: '0 0 * * 0' # runs weekly on Sunday at 00:00
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
lockfile:
|
nix-flake-update:
|
||||||
|
permissions:
|
||||||
|
contents: write
|
||||||
|
id-token: write
|
||||||
|
issues: write
|
||||||
|
pull-requests: write
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout repository
|
- uses: actions/checkout@v4
|
||||||
uses: actions/checkout@v4
|
- uses: DeterminateSystems/determinate-nix-action@v3
|
||||||
- name: Install Determinate Nix
|
- uses: DeterminateSystems/update-flake-lock@main
|
||||||
uses: DeterminateSystems/determinate-nix-action@v3
|
|
||||||
- name: Update flake.lock
|
|
||||||
uses: DeterminateSystems/update-flake-lock@main
|
|
||||||
with:
|
with:
|
||||||
pr-title: "Update flake.lock" # Title of PR to be created
|
pr-title: "Update Nix flake inputs" # Title of PR to be created
|
||||||
pr-labels: | # Labels to be set on the PR
|
pr-labels: | # Labels to be set on the PR
|
||||||
dependencies
|
dependencies
|
||||||
automated
|
automated
|
||||||
|
Loading…
x
Reference in New Issue
Block a user