Jul 31, 2024 · Jul 30, 2024 · Jul 31, 2024 · Jul 31, 2024 · Jul 31, 2024 · Jul 30, 2024
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
    needs: changes
    if: needs.changes.outputs.gomod == 'true'
    runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
    permissions:
      # Give the default GITHUB_TOKEN write permission to commit and push the changed files back to the repository.
      contents: write
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 1
          # See: https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
          token: ${{ secrets.GITHUB_TOKEN }}
          token: ${{ secrets.CDRCI_GITHUB_TOKEN }}

      - name: Setup Go
        uses: ./.github/actions/setup-go

      - name: Update Nix Flake SRI Hash
        run: ./scripts/update-flake.sh

      # auto update flake for dependabot
      - uses: stefanzweifel/git-auto-commit-action@v5
        if: github.actor == 'dependabot[bot]'
        with:
          # Allows dependabot to still rebase!
          commit_message: "[dependabot skip] Update Nix Flake SRI Hash"

      # require everyone else to update it themselves
      - name: Ensure No Changes
        if: github.actor != 'dependabot[bot]'
        run: git diff --exit-code

  lint:
    needs: changes
    if: needs.changes.outputs.offlinedocs-only == 'false' || needs.changes.outputs.ci == 'true' || github.ref == 'refs/heads/main'
Original file line number	Diff line number	Diff line change
Expand Up		@@ -121,28 +121,32 @@ jobs:
		needs: changes
		if: needs.changes.outputs.gomod == 'true'
		runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' \|\| 'ubuntu-latest' }}
		permissions:
		# Give the default GITHUB_TOKEN write permission to commit and push the changed files back to the repository.
		contents: write
		steps:
		- name: Checkout
		uses: actions/checkout@v4
		with:
		fetch-depth: 1
		# See: https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
		token: ${{ secrets.GITHUB_TOKEN }}
		token: ${{ secrets.CDRCI_GITHUB_TOKEN }}
Copy link MemberAuthor matifaliJul 30, 2024 Choose a reason for hiding this comment The reason will be displayed to describe this comment to others.Learn more. This secret is already available in Secrets. I assume that it has push/write access to the repo. We need to add/update a secret if it does not work. Copy link Member deansheatherJul 31, 2024 Choose a reason for hiding this comment The reason will be displayed to describe this comment to others.Learn more. This is a PAT for the cdrci account with write perms, so it should be fine writing to PRs on this repo. matifali reacted with thumbs up emoji

		- name: Setup Go
		uses: ./.github/actions/setup-go

		- name: Update Nix Flake SRI Hash
		run: ./scripts/update-flake.sh

		# auto update flake for dependabot
		- uses: stefanzweifel/git-auto-commit-action@v5
		if: github.actor == 'dependabot[bot]'
		with:
		# Allows dependabot to still rebase!
		commit_message: "[dependabot skip] Update Nix Flake SRI Hash"

		# require everyone else to update it themselves
		- name: Ensure No Changes
		if: github.actor != 'dependabot[bot]'
		run: git diff --exit-code

		lint:
		needs: changes
		if: needs.changes.outputs.offlinedocs-only == 'false' \|\| needs.changes.outputs.ci == 'true' \|\| github.ref == 'refs/heads/main'
Expand Down