Add permissions to GitHub Actions workflow

dirkvdb · dirkvdb · commit 396d37ec9857 · 2025-11-15T16:15:03.000+01:00
Fix linker flags for macOS static builds in flake.nix
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -6,6 +6,9 @@ jobs:
   build:
     name: ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
diff --git a/flake.nix b/flake.nix
@@ -170,7 +170,7 @@
                 "-DCMAKE_EXE_LINKER_FLAGS=-static"
               ]
               ++ pkgsForHost.lib.optionals (isStatic && pkgsForHost.stdenv.isDarwin) [
-                "-DCMAKE_EXE_LINKER_FLAGS=-framework CoreVideo -framework VideoToolbox"
+                "-DCMAKE_EXE_LINKER_FLAGS=-framework CoreVideo;-framework VideoToolbox"
               ]
               ++ pkgsForHost.lib.optionals (pkgsForHost.stdenv.isLinux && !isStatic && !isWindows) [
                 "-DENABLE_GIO=ON"

Original file line number	Diff line number	Diff line change
`@@ -170,7 +170,7 @@`
`170`	`170`	`"-DCMAKE_EXE_LINKER_FLAGS=-static"`
`171`	`171`	`]`
`172`	`172`	`++ pkgsForHost.lib.optionals (isStatic && pkgsForHost.stdenv.isDarwin) [`
`173`		`- "-DCMAKE_EXE_LINKER_FLAGS=-framework CoreVideo -framework VideoToolbox"`
	`173`	`+ "-DCMAKE_EXE_LINKER_FLAGS=-framework CoreVideo;-framework VideoToolbox"`
`174`	`174`	`]`
`175`	`175`	`++ pkgsForHost.lib.optionals (pkgsForHost.stdenv.isLinux && !isStatic && !isWindows) [`
`176`	`176`	`"-DENABLE_GIO=ON"`