Home

nur @main - refs - log -
- 
https://git.jolheiser.com/nur.git
My NUR
tree log patch
ci: add eval check
Signature
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEPe4cVW4cPcVU9YdaAD8glkEbX5IFAl/JQu8ACgkQAD8glkEb X5L/5w/6A7mwpAduzIm4Hw/8FHdsBwWs8cuxAwzt3KrddvJPcAjSRUErsOKwM4e6 ZNnKkDrcqIWV2zqhZ5d9QlbDGkVHTX8Hms4Yx98qiACRrfmyJUWl41NxfDd0cfPZ l7n4KcZ57SkycfF/aCfUIc+Fg64tmn6BCbTBt3GfzzWBUNZQcSPYcVioK8Dtb3TC 7n8r9mRy1b4EcyXqqBK/B/XPs3tppYcfegzlOF/Htf0Ob+CTzRLvcOXr6XnFsRbG N6xmcsn+DruAdY3EZQDovHrFns5IbxEsrU/unafp8rCMzgGCPxnICxzRp06APAl9 qf0MKMiOMxaQLuvXWH/+bZZajDV7fNVSXU7vmPCt4uixA9Rr3/xuS9E+t46s0VuW jHhZ/0vC9sfLIM6qWylGj9TKPuBsgQokg8mMy/nj0w8Xsvp8fltCooCEZCvav1Xz 9Br1GMAWzgrjHS29+dzMZwjc+OoM1xvELR7PoePtKZ3EbxMWRz13weVruOxW0pXI RKrPycCn4pJUEIhJoRVrZcUiy9nfsRzBdQXJYKA9r4OEkYw/MGAVfq/dcOXEYmEY vFTIXcv4Ocw1lz+KYmUFcFqg2a/RdK4zFEZRT4hg/IwoCAFpmOlagHCkzW023bn/ 251iVQMKxsmqXHPphR+5aXvpVxLwpV3wP0rBeK8nON1L/58D1uA= =ddam -----END PGP SIGNATURE-----
Jörg Thalheim <joerg@thalheim.io>
4 years ago
1 changed files, 9 additions(+), 0 deletions(-)
.github/workflows/build.yml
M .github/workflows/build.yml → .github/workflows/build.yml
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e63ed8f4827de7ea821be839eeea6a60e26f54c9..76eaf929beac14907c21c0d617e43bed6b93c98c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -48,6 +48,15 @@       if: ${{ matrix.cachixName != '<YOUR_CACHIX_NAME>' }}
       with:
         name: ${{ matrix.cachixName }}
         signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
+    - name: Check evaluation
+      run: |
+        nix-env -f . -qa \* --meta --xml \
+          --allowed-uris https://static.rust-lang.org \
+          --option restrict-eval true \
+          --option allow-import-from-derivation true \
+          --drv-path --show-trace \
+          -I nixpkgs=$(nix-instantiate --find-file nixpkgs) \
+          -I $PWD
     - name: Build nix packages
       # TODO switch to default nixpkgs channel once nix-build-uncached 1.0.0 is in stable
       run: nix run -I 'nixpkgs=channel:nixos-unstable' nixpkgs.nix-build-uncached -c nix-build-uncached ci.nix -A cacheOutputs