Merge branch 'master' of github.com:srid/haskell-flake

.github/workflows/ci.yaml

@@ -1,24 +1,36 @@
 name: "CI"
+
 on:
   push:
     branches:
       - master
   pull_request:
+  workflow_dispatch:
+
 jobs:
+
   configure:
-    runs-on: self-hosted
+    runs-on: x86_64-linux
     outputs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
      - uses: actions/checkout@v4
      - id: set-matrix
-       run: echo "matrix=$(nixci gh-matrix --systems=aarch64-linux,aarch64-darwin | jq -c .)" >> $GITHUB_OUTPUT
+       run: echo "matrix=$(nixci gh-matrix --systems=x86_64-linux,x86_64-darwin,aarch64-darwin | jq -c .)" >> $GITHUB_OUTPUT
+
   nix:
-    runs-on: self-hosted
+    runs-on: ${{ matrix.system }}
+    permissions:
+      contents: read
     needs: configure
     strategy:
       matrix: ${{ fromJson(needs.configure.outputs.matrix) }}
       fail-fast: false
     steps:
       - uses: actions/checkout@v4
-      - run: nixci build --systems "github:nix-systems/${{ matrix.system }}" .#default.${{ matrix.subflake}}
+      - run: |
+          nixci \
+            --extra-access-tokens "github.com=${{ secrets.GITHUB_TOKEN }}" \
+            build \
+            --systems "github:nix-systems/${{ matrix.system }}" \
+            .#default.${{ matrix.subflake}}

dev/flake.nix

@@ -20,7 +20,7 @@
           programs.nixpkgs-fmt.enable = true;
         };
         devShells.default = pkgs.mkShell {
-          # cf. https://community.flake.parts/haskell-flake#composing-devshells
+          # cf. https://community.flake.parts/haskell-flake/devshell#composing-devshells
           inputsFrom = [
             config.treefmt.build.devShell
           ];