diff --git a/.github/workflows/scorecards-analysis.yaml b/.github/workflows/scorecards-analysis.yaml deleted file mode 100644 index 938e43cc..00000000 --- a/.github/workflows/scorecards-analysis.yaml +++ /dev/null @@ -1,46 +0,0 @@ -name: Scorecards supply-chain security -on: - branch_protection_rule: - schedule: - # Weekly on Saturdays. - - cron: 30 1 * * 6 - push: - branches: [main] - -permissions: read-all - -jobs: - analysis: - name: Scorecards analysis - runs-on: ubuntu-latest - permissions: - # Needed to upload the results to code-scanning dashboard. - security-events: write - actions: read - contents: read - - steps: - - name: Checkout code - uses: actions/checkout@f095bcc56b7c2baf48f3ac70d6d6782f4f553222 - with: - persist-credentials: false - - - name: Run analysis - uses: ossf/scorecard-action@c1aec4ac820532bab364f02a81873c555a0ba3a1 # v1.0.4 - with: - results_file: results.sarif - results_format: sarif - repo_token: ${{ secrets.SCORECARD_READ_TOKEN }} - publish_results: true - - - name: Upload artifact - uses: actions/upload-artifact@82c141cc518b40d92cc801eee768e7aafc9c2fa2 # v2.3.1 - with: - name: SARIF file - path: results.sarif - retention-days: 5 - - - name: Upload to code-scanning - uses: github/codeql-action/upload-sarif@5f532563584d71fdef14ee64d17bafb34f751ce5 # v1.0.26 - with: - sarif_file: results.sarif diff --git a/makes.nix b/makes.nix index c7934471..e60b725f 100644 --- a/makes.nix +++ b/makes.nix @@ -1,4 +1,11 @@ -{ fetchNixpkgs, fetchUrl, outputs, projectPath, __nixpkgs__, ... }: { +{ fetchNixpkgs, fetchUrl, makeScript, outputs, projectPath, __nixpkgs__, ... +}: { + jobs = { + "/test" = makeScript { + name = "test/job"; + entrypoint = "echo Hello test"; + }; + }; projectIdentifier = "makes-repo"; cache = { readNixos = true; diff --git a/src/evaluator/modules/default.nix b/src/evaluator/modules/default.nix index d55c24f5..2d17c909 100644 --- a/src/evaluator/modules/default.nix +++ b/src/evaluator/modules/default.nix @@ -17,6 +17,7 @@ (import ./format-yaml/default.nix args) (import ./hello-world/default.nix args) (import ./inputs/default.nix) + (import ./jobs/default.nix args) (import ./lint-bash/default.nix args) (import ./lint-git-mailmap/default.nix args) (import ./lint-nix/default.nix args) diff --git a/src/evaluator/modules/jobs/default.nix b/src/evaluator/modules/jobs/default.nix new file mode 100644 index 00000000..9ab38ca4 --- /dev/null +++ b/src/evaluator/modules/jobs/default.nix @@ -0,0 +1,14 @@ +{ __toModuleOutputs__, ... }: +{ config, lib, ... }: +let + makeOutput = name: value: { + inherit name; + inherit value; + }; +in { + options.jobs = lib.mkOption { + default = { }; + type = lib.types.attrsOf lib.types.package; + }; + config.outputs = __toModuleOutputs__ makeOutput config.jobs; +}