deps: keep install-nix-action at v31.4.0

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
This commit is contained in:
Daniel Weiße 2025-09-04 12:46:05 +02:00
parent a927b4b951
commit c250688244
No known key found for this signature in database
GPG key ID: 7DD3015F3DDE4B9C
3 changed files with 4 additions and 2 deletions

View file

@ -114,7 +114,7 @@ runs:
- name: Install nix
if: steps.check_inputs.outputs.nixPreinstalled == 'false'
uses: cachix/install-nix-action@c134e4c9e34bac6cab09cf239815f9339aaaf84e # v31
uses: cachix/install-nix-action@17fe5fb4a23ad6cbbe47d6b3f359611ad276644c # v31.4.0
with:
install_url: "https://releases.nixos.org/nix/nix-${{ steps.check_inputs.outputs.nixVersion }}/install"

View file

@ -17,7 +17,7 @@ jobs:
path: constellation
- name: Install Nix
uses: cachix/install-nix-action@c134e4c9e34bac6cab09cf239815f9339aaaf84e # v31
uses: cachix/install-nix-action@17fe5fb4a23ad6cbbe47d6b3f359611ad276644c # v31.4.0
- name: Download Firmware release
id: download-firmware

View file

@ -28,6 +28,8 @@
'operators/constellation-node-operator/config/manager/kustomization.yaml',
],
ignoreDeps: [
// Newer version install different versions of nix, breaking reproducibility
'cachix/install-nix-action',
'github.com/edgelesssys/constellation/v2',
// Only update once they fixed dependency violations on their side.
'github.com/google/go-tpm-tools',