Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 9 additions & 6 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,14 +35,17 @@ jobs:
- name: Install Nix
if: steps.filter.outputs.skip_build != 'true'
uses: DeterminateSystems/nix-installer-action@main
uses: cachix/install-nix-action@v27
with:
extra_nix_config: |
experimental-features = nix-command flakes
- name: Setup Nix cache
- name: Setup Cachix
if: steps.filter.outputs.skip_build != 'true'
uses: DeterminateSystems/magic-nix-cache-action@main
# For faster CI, consider adding a dedicated binary cache:
# cachix-name: logos-workspace
# cachix-auth-token: ${{ secrets.CACHIX_AUTH_TOKEN }}
uses: cachix/cachix-action@v15
with:
name: logos-co
authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
Copy link

Copilot AI Mar 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cachix/cachix-action will enable pushing to the Cachix cache when authToken is provided. Since this workflow runs on pull_request, PR builds would upload outputs from unreviewed code and can also fail on forked PRs where secrets.CACHIX_AUTH_TOKEN is unavailable. Consider omitting authToken for PRs (pull-only cache) and only enabling it for trusted events (e.g., push to master or non-fork PRs via an if: guard).

Suggested change
authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'

Copilot uses AI. Check for mistakes.

- name: Add workspace tools to PATH
if: steps.filter.outputs.skip_build != 'true'
Expand Down
2 changes: 1 addition & 1 deletion repos/logos-chat-ui
Loading