Update the readme to account for minimum mandatory permissions

This commit is contained in:
Graham Christensen 2025-05-28 09:51:44 -04:00
parent 428c2b58a4
commit 5681a56ca1

View File

@ -11,7 +11,7 @@ This is a GitHub Action that updates the [`flake.lock`][lockfile] file for your
Here's an example GitHub Action workflow using this Action: Here's an example GitHub Action workflow using this Action:
```yaml ```yaml
name: update-flake-lock name: Flake.lock: update Nix dependencies
on: on:
workflow_dispatch: # allows manual triggering workflow_dispatch: # allows manual triggering
@ -19,17 +19,19 @@ on:
- cron: '0 0 * * 0' # runs weekly on Sunday at 00:00 - cron: '0 0 * * 0' # runs weekly on Sunday at 00:00
jobs: jobs:
lockfile: nix-flake-update:
permissions:
contents: write
id-token: write
issues: write
pull-requests: write
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout repository - uses: actions/checkout@v4
uses: actions/checkout@v4 - uses: DeterminateSystems/determinate-nix-action@v3
- name: Install Determinate Nix - uses: DeterminateSystems/update-flake-lock@main
uses: DeterminateSystems/determinate-nix-action@v3
- name: Update flake.lock
uses: DeterminateSystems/update-flake-lock@main
with: with:
pr-title: "Update flake.lock" # Title of PR to be created pr-title: "Update Nix flake inputs" # Title of PR to be created
pr-labels: | # Labels to be set on the PR pr-labels: | # Labels to be set on the PR
dependencies dependencies
automated automated