From 3508e22b0849c28eff5542065056c07ebe7347b8 Mon Sep 17 00:00:00 2001 From: Harald Hoyer Date: Mon, 21 Jul 2025 12:40:30 +0200 Subject: [PATCH 1/2] fix: update extra substituter URL in nixConfig - Replaced outdated substituter URL with a new static IP-based URL. Signed-off-by: Harald Hoyer --- .github/workflows/nix.yml | 12 ++++++------ flake.nix | 2 +- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml index d474c3a..4a318da 100644 --- a/.github/workflows/nix.yml +++ b/.github/workflows/nix.yml @@ -20,12 +20,12 @@ jobs: extra_nix_config: | access-tokens = github.com=${{ github.token }} trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= tee-pot:SS6HcrpG87S1M6HZGPsfo7d1xJccCGev7/tXc5+I4jg= - substituters = https://cache.nixos.org/ https://attic.teepot.org/tee-pot + substituters = https://cache.nixos.org/ https://static.188.92.12.49.clients.your-server.de/tee-pot sandbox = true - name: Setup Attic cache uses: ryanccn/attic-action@v0 with: - endpoint: https://attic.teepot.org/ + endpoint: https://static.188.92.12.49.clients.your-server.de/ cache: tee-pot token: ${{ secrets.ATTIC_TOKEN }} - name: Enable magic Nix cache @@ -42,12 +42,12 @@ jobs: extra_nix_config: | access-tokens = github.com=${{ github.token }} trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= tee-pot:SS6HcrpG87S1M6HZGPsfo7d1xJccCGev7/tXc5+I4jg= - substituters = https://cache.nixos.org/ https://attic.teepot.org/tee-pot + substituters = https://cache.nixos.org/ https://static.188.92.12.49.clients.your-server.de/tee-pot sandbox = true - name: Setup Attic cache uses: ryanccn/attic-action@v0 with: - endpoint: https://attic.teepot.org/ + endpoint: https://static.188.92.12.49.clients.your-server.de/ cache: tee-pot token: ${{ secrets.ATTIC_TOKEN }} - name: Enable magic Nix cache @@ -65,12 +65,12 @@ jobs: extra_nix_config: | access-tokens = github.com=${{ github.token }} trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= tee-pot:SS6HcrpG87S1M6HZGPsfo7d1xJccCGev7/tXc5+I4jg= - substituters = https://cache.nixos.org/ https://attic.teepot.org/tee-pot + substituters = https://cache.nixos.org/ https://static.188.92.12.49.clients.your-server.de/tee-pot sandbox = true - name: Setup Attic cache uses: ryanccn/attic-action@v0 with: - endpoint: https://attic.teepot.org/ + endpoint: https://static.188.92.12.49.clients.your-server.de/ cache: tee-pot token: ${{ secrets.ATTIC_TOKEN }} - name: Enable magic Nix cache diff --git a/flake.nix b/flake.nix index dff30ce..9aa46f2 100644 --- a/flake.nix +++ b/flake.nix @@ -1,6 +1,6 @@ { nixConfig = { - extra-substituters = [ "https://attic.teepot.org/tee-pot" ]; + extra-substituters = [ "https://static.188.92.12.49.clients.your-server.de/tee-pot" ]; extra-trusted-public-keys = [ "tee-pot:SS6HcrpG87S1M6HZGPsfo7d1xJccCGev7/tXc5+I4jg=" ]; }; From 4a78faf09497054f4da57ffb4cb7862f96d62b1b Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 23 Jul 2025 13:13:15 +0000 Subject: [PATCH 2/2] chore(deps): update trufflesecurity/trufflehog action to v3.90.1 --- .github/workflows/secrets_scanner.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/secrets_scanner.yaml b/.github/workflows/secrets_scanner.yaml index 8de6556..c6fe1d2 100644 --- a/.github/workflows/secrets_scanner.yaml +++ b/.github/workflows/secrets_scanner.yaml @@ -9,7 +9,7 @@ jobs: with: fetch-depth: 0 - name: TruffleHog OSS - uses: trufflesecurity/trufflehog@af3e68261fa87568031f65161577cc2ebe1ca669 # v3.83.7 + uses: trufflesecurity/trufflehog@907ac64fd42b18dab2ceba2fda39834d3f8ba7e3 # v3.90.1 with: path: ./ base: ${{ github.event.repository.default_branch }}