fix: pass S3 creds via env vars for nix copy, not URL params

This commit is contained in:
Christopher Mühl 2026-02-18 13:54:05 +01:00
parent 5bb8b5a427
commit f870ef0bf3
No known key found for this signature in database
GPG key ID: 925AC7D69955293F

View file

@ -27,6 +27,6 @@ runs:
echo "${NIX_SIGNING_KEY}" > /tmp/nix-key echo "${NIX_SIGNING_KEY}" > /tmp/nix-key
nix store sign -k /tmp/nix-key --recursive "${{ inputs.store-path }}" nix store sign -k /tmp/nix-key --recursive "${{ inputs.store-path }}"
nix copy \ nix copy \
--to "s3://${{ inputs.s3-bucket }}?endpoint=${{ inputs.s3-endpoint }}&access-key-id=${AWS_ACCESS_KEY_ID}&secret-access-key=${AWS_SECRET_ACCESS_KEY}" \ --to "s3://${{ inputs.s3-bucket }}?endpoint=${{ inputs.s3-endpoint }}" \
"${{ inputs.store-path }}" "${{ inputs.store-path }}"
rm /tmp/nix-key rm /tmp/nix-key