mirror of
https://github.com/LGUG2Z/komorebi.git
synced 2026-11-13 12:23:38 +01:00
The write token goes to cachix-action on a push (master and the temporary komomono trigger, without naming either), a manual run and a schedule; a pull request, a fork and the merge queue only read. The flake-lock update goes through the nix action too, and the nixpkgs canary reads the cache but never pushes (push: "false" replaces cache: "false"). docs(ci): the write rule, the read-only path and a checklist for the first push to komomono.